Apple’s Find My Network Can be Abused to Exfiltrate Data From Nearby Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Latest research has demonstrated a new exploit that enables arbitrary data to be uploaded from devices that are not connected to the Internet by simply sending “Find My Bluetooth” broadcasts to nearby Apple devices. “It’s possible to upload arbitrary data …

Why Password Hygiene Needs a Reboot

Blog WriterThe Hacker News - Original news source is thehackernews.com

In today’s digital world, password security is more important than ever. While biometrics, one-time passwords (OTP), and other emerging forms of authentication are often touted as replacements to the traditional password, today, this concept is more marketing hype than anything …

Experts Warn About Ongoing AutoHotkey-Based Malware Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different …

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized

Blog WriterThe Hacker News - Original news source is thehackernews.com

Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. …

Report to Your Management with the Definitive ‘Incident Response for Management’ Presentation Template

Blog WriterThe Hacker News - Original news source is thehackernews.com

Security incidents occur. It’s not a matter of ‘if’ but of ‘when.’ There are security products and procedures that were implemented to optimize the IR process, so from the ‘security-professional’ angle, things are taken care of. However, many security pros …

Hackers Using Microsoft Build Engine to Deliver Malware Filelessly

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors are abusing Microsoft Build Engine (MSBuild) to filelessly deliver remote access trojans and password-stealing malware on targeted Windows systems. The actively ongoing campaign is said to have emerged last month, researchers from cybersecurity firm Anomali said on Thursday, adding the …

Magecart Hackers Now hide PHP-Based Backdoor In Website Favicons

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybercrime groups are distributing malicious PHP web shells disguised as a favicon to maintain remote access to the compromised servers and inject JavaScript skimmers into online shopping platforms with an aim to steal financial information from their users. “These web …

Pakistan-Linked Hackers Added New Windows Malware to Its Arsenal

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybercriminals with suspected ties to Pakistan continue to rely on social engineering as a crucial component of its operations as part of an evolving espionage campaign against Indian targets, according to new research. The attacks have been linked to a …

Colonial Pipeline Paid Nearly $5 Million in Ransom to Cybercriminals

Blog WriterThe Hacker News - Original news source is thehackernews.com

Colonial Pipeline on Thursday restored operations to its entire pipeline system nearly a week following a ransomware infection targeting its IT systems, forcing it to reportedly shell out nearly $5 million to regain control of its computer networks. “Following this …

Big Cybersecurity Tips For Remote Workers Who Use Their Own Tech

Blog WriterThe Hacker News - Original news source is thehackernews.com

As the total number of people working from home has grown dramatically in the last year or two, so has the number of individuals who use all of their own technology for their jobs. If you’re a remote worker who …