Cyber espionage by Chinese hackers in neighbouring nations is on the rise

Blog WriterThe Hacker News - Original news source is thehackernews.com

A string of cyber espionage campaigns dating all the way back to 2014 and focused on gathering military intelligence from neighbouring countries have been linked to a Chinese military-intelligence apparatus. In a wide-ranging report published by Massachusetts-headquartered Recorded Future this …

North Korea Exploited VPN Flaw to Hack South’s Nuclear Research Institute

Blog WriterThe Hacker News - Original news source is thehackernews.com

South Korea’s state-run Korea Atomic Energy Research Institute (KAERI) on Friday disclosed that its internal network was infiltrated by suspected attackers operating out of its northern counterpart. The intrusion is said to have taken place on May 14 through a …

Russia bans VyprVPN, Opera VPN services for not complying with blacklist request

Blog WriterThe Hacker News - Original news source is thehackernews.com

Russia’s telecommunications and media regulator Roskomnadzor (RKN) on Thursday introduced restrictions on the operation of VyprVPN and Opera VPN services in the country. “In accordance with the regulation on responding to threats to circumvent restrictions on access to child pornography, …

Google Releases New Framework to Prevent Software Supply Chain Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

As software supply chain attacks emerge as a point of concern in the wake of SolarWinds and Codecov security incidents, Google is proposing a solution to ensure the integrity of software packages and prevent unauthorized modifications.  Called “Supply chain Levels for …

Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ed ‌in‌-the‌-Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has rolled out yet another update to Chrome browser for Windows, Mac, and Linux to fix four security vulnerabilities, including one zero-day flaw that’s being exploited in the wild. Tracked as CVE-2021-30554, the high severity flaw concerns a use after free …

[eBook] 7 Signs You Might Need a New Detection and Response Tool

Blog WriterThe Hacker News - Original news source is thehackernews.com

It’s natural to get complacent with the status quo when things seem to be working. The familiar is comfortable, and even if something better comes along, it brings with it many unknowns. In cybersecurity, this tendency is countered by the …

Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Middle Eastern advanced persistent threat (APT) group has resurfaced after a two-month hiatus to target government institutions in the Middle East and global government entities associated with geopolitics in the region in a rash of new campaigns observed earlier …

Strengthen Your Password Policy With GDPR Compliance

Blog WriterThe Hacker News - Original news source is thehackernews.com

A solid password policy is the first line of defense for your corporate network. Protecting your systems from unauthorized users may sound easy on the surface, but it can actually be quite complicated. You have to balance password security with …

A New Spyware is Targeting Telegram and Psiphon VPN Users in Iran

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors with suspected ties to Iran have been found to leverage instant messaging and VPN apps like Telegram and Psiphon to install a Windows remote access trojan (RAT) capable of stealing sensitive information from targets’ devices since at least …

Researchers Uncover ‘Process Ghosting’ — A New Malware Evasion Technique

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed a new executable image tampering attack dubbed “Process Ghosting” that could be potentially abused by an attacker to circumvent protections and stealthily run malicious code on a Windows system. “With this technique, an attacker can write …