How Cybersecurity Enables Government, Health, EduTech Cope With COVID-19

Blog WriterThe Hacker News - Original news source is thehackernews.com

The advent of the Covid-19 pandemic and the impact on our society has resulted in many dramatic changes to how people are traveling, interacting with each other, and collaborating at work. There are several trends taking place as a consequence …

HTTP Status Codes Command This Malware How to Control Hacked Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new version of COMpfun remote access trojan (RAT) has been discovered in the wild that uses HTTP status codes to control compromised systems targeted in a recent campaign against diplomatic entities in Europe. The cyberespionage malware—traced to Turla APT …

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

Blog WriterThe Hacker News - Original news source is thehackernews.com

DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers’ data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a …

Critical SaltStack RCE Bug (CVSS Score 10) Affects Thousands of Data Centers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two severe security flaws have been discovered in the open-source SaltStack Sat configuration framework that could allow an adversary to execute arbitrary code on remote servers deployed in data centers and cloud environments. The vulnerabilities were identified by F-Secure researchers …

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named “VictoryGate,” has been active since …

CISA Warns Patched Pulse Secure VPNs Could Still Expose Organizations to Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

The United States Cybersecurity and Infrastructure Security Agency (CISA) yesterday issued a fresh advisory alerting organizations to change all their Active Directory credentials as a defense against cyberattacks trying to leverage a known remote code execution (RCE) vulnerability in Pulse …

7 Ways Hackers and Scammers Are Exploiting Coronavirus Panic

Blog WriterThe Hacker News - Original news source is thehackernews.com

In our previous stories, you might have already read about various campaigns warning how threat actors are capitalizing on the ongoing coronavirus pandemic in an attempt to infect your computers and mobile devices with malware or scam you out of …

How Just Visiting A Site Could Have Hacked Your iPhone or MacBook Camera

Blog WriterThe Hacker News - Original news source is thehackernews.com

If you use Apple iPhone or MacBook, here we have a piece of alarming news for you. Turns out merely visiting a website — not just malicious but also legitimate sites unknowingly loading malicious ads as well — using Safari …

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers with Qihoo 360’s NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploited two …

New Android Cookie-Stealing Malware Found Hijacking Facebook Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new simple but dangerous strain of Android malware has been found in the wild that steals users’ authentication cookies from the web browsing and other apps, including Chrome and Facebook, installed on the compromised devices. Dubbed “Cookiethief” by Kaspersky …