Android Apps with 5.8 million Installs Caught Stealing Users’ Facebook Passwords

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google intervened to remove nine Android apps downloaded more than 5.8 million times from the company’s Play Store after the apps were caught furtively stealing users’ Facebook login credentials. “The applications were fully functional, which was supposed to weaken the …

Learn to Code — Get 2021 Master Bundle of 13 Online Courses @ 99% OFF

Blog WriterThe Hacker News - Original news source is thehackernews.com

Whether you are looking to turn into a full-time developer or simply increasing your earnings in your current niche, learning to code can be a smart move. It is a well-known fact that recruiters strive to recruit people with technical …

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called “mirai_ptea” that leverages an undisclosed vulnerability in digital video recorders (DVR) provided by KGUARD to propagate and carry out distributed denial-of-service (DDoS) attacks. Chinese security firm Netlab 360 pinned the …

Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

In yet another instance of software supply chain attack, unidentified hackers breached the website of MonPass, one of Mongolia’s major certificate authorities, to backdoor its installer software with Cobalt Strike binaries. The trojanized client was available for download between February 8, …

NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, according to a joint advisory published by intelligence agencies in the U.K. and U.S. The National Security Agency (NSA), Cybersecurity and …

New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has launched an updated version of Scorecards, its automated security tool that produces a “risk score” for open source initiatives, with improved checks and capabilities to make the data generated by the utility accessible for analysis. “With so much software …

Microsoft Warns of Critical “PrintNightmare” Flaw Being Exploited in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday officially confirmed that the “PrintNightmare” remote code execution (RCE) vulnerability affecting Windows Print Spooler is different from the issue the company addressed as part of its Patch Tuesday update released earlier this month, while warning that it …

IndigoZebra APT Hacking Campaign Targets the Afghan Government

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers are warning of ongoing attacks coordinated by a suspected Chinese-speaking threat actor targeting the Afghanistan government as part of an espionage campaign that may have had its provenance as far back as 2014. Israeli cybersecurity firm Check Point …

Rethinking Application Security in the API-First Era

Blog WriterThe Hacker News - Original news source is thehackernews.com

Securing applications it the API-first era can be an uphill battle. As development accelerates, accountability becomes unclear, and getting controls to operate becomes a challenge in itself. It’s time that we rethink our application security strategies to reflect new priorities, …

Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have detailed critical security vulnerabilities affecting NETGEAR DGN2200v1 series routers, which they say could be reliably abused as a jumping-off point to compromise a network’s security and gain unfettered access. The three HTTPd authentication security weaknesses (CVSS scores: 7.1 – 9.4) …