Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sensitive data stored in a variety of apps, including apps such as Google …

Wake up! Identify API Vulnerabilities Proactively, From Production Back to Code

Blog WriterThe Hacker News - Original news source is thehackernews.com

After more than 20 years in the making, now it’s official: APIs are everywhere. In a 2021 survey, 73% of enterprises reported that they already publish more than 50 APIs, and this number is constantly growing. APIs have crucial roles to …

Kaseya Gets Universal Decryptor to Help REvil Ransomware Victims

Blog WriterThe Hacker News - Original news source is thehackernews.com

Nearly three weeks after Florida-based software vendor Kaseya was hit by a widespread supply-chain ransomware attack, the company on Thursday said it obtained a universal decryptor to unlock systems and help customers recover their data. “On July 21, Kaseya obtained a …

Dutch Police Arrest Two Hackers Tied to “Fraud Family” Cybercrime Ring

Blog WriterThe Hacker News - Original news source is thehackernews.com

Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what’s known as a “Fraud-as-a-Service” operation. The apprehended suspects, …

APT Hackers Distributed Android Trojan via Syrian e-Government Portal

Blog WriterThe Hacker News - Original news source is thehackernews.com

An advanced persistent threat (APT) actor has been tracked in a new campaign deploying Android malware via the Syrian e-Government Web Portal, indicating an upgraded arsenal designed to compromise victims. “To the best of our knowledge, this is the first …

Reduce End-User Password Change Frustrations

Blog WriterThe Hacker News - Original news source is thehackernews.com

Organizations today must give attention to their cybersecurity posture, including policies, procedures, and technical solutions for cybersecurity challenges.  This often results in a greater burden on the IT service desk staff as end-users encounter issues related to security software, policies, …

Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

Blog WriterThe Hacker News - Original news source is thehackernews.com

Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system. Chief among them is CVE-2019-2729, a critical …

Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts. Joseph O’Connor, 22, has been charged with intentionally accessing a computer …

Malicious NPM Package Caught Stealing Users’ Saved Passwords From Browsers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A software package available from the official NPM repository has been revealed to be actually a front for a tool that’s designed to steal saved passwords from the Chrome web browser. The package in question, named “nodejs_net_server” and downloaded over …

XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

A popular malware known for stealing sensitive information from Windows machines has evolved into a new strain capable of also targeting Apple’s macOS operating system. The upgraded malware, dubbed “XLoader,” is a successor to another well-known Windows-based info stealer called …