Salesforce Release Updates — A Cautionary Tale for Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

On the surface, Salesforce seems like a classic Software-as-a-Service (SaaS) platform. Someone might even argue that Salesforce invented the SaaS market. However, the more people work with the full offering of Salesforce, the more they realize that it goes beyond …

A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to distribute a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish against individuals in Belgium as well as government agencies, companies, …

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an adversary to acquire legitimate user names registered in the module via a brute-force attack, unauthorizedly login to the CPU module, …

Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a remote attacker to execute arbitrary code and even cause a denial-of-service (DoS) condition. The issues, tracked …

Several Malware Families Targeting IIS Web Servers With Malicious Modules

Blog WriterThe Hacker News - Original news source is thehackernews.com

A systematic analysis of attacks against Microsoft’s Internet Information Services (IIS) servers has revealed as many as 14 malware families, 10 of them newly documented, indicating that the Windows-based web server software continues to be a hotbed for natively developed malware for …

Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus

Blog WriterThe Hacker News - Original news source is thehackernews.com

An amalgam of multiple state-sponsored threat groups from China may have been behind a string of targeted attacks against Russian federal executive authorities in 2020. The latest research, published by Singapore-headquartered company Group-IB, delves into a piece of computer virus …

New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor presumed to be of Chinese origin has been linked to a series of 10 attacks targeting Mongolia, Russia, Belarus, Canada, and the U.S. from January to July 2021 that involve the deployment of a remote access trojan …

Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday disclosed 14 vulnerabilities affecting a commonly-used TCP/IP stack used in millions of Operational Technology (OT) devices manufactured by no fewer than 200 vendors and deployed in manufacturing plants, power generation, water treatment, and critical infrastructure sectors. …

Chinese Hackers Target Major Southeast Asian Telecom Companies

Blog WriterThe Hacker News - Original news source is thehackernews.com

Three distinct clusters of malicious activities operating on behalf of Chinese state interests have staged a series of attacks to target networks belonging to at least five major telecommunications companies located in Southeast Asian countries since 2017. “The goal of …

Cynet Empowers IT Resellers and Service Providers to Become Fully Qualified MSSPs

Blog WriterThe Hacker News - Original news source is thehackernews.com

As cyber incidents increase in scope and impact, more and more organizations come to realize that outsourcing their defenses is the best practice—significantly increasing the Managed Security Service Provider (MSSP) market opportunities. Until recently, IT integrators, VARs, and MSPs haven’t …