Researcher Discloses Critical RCE Flaws In Cisco Security Manager

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has published multiple security advisories concerning critical flaws in Cisco Security Manager (CSM) a week after the networking equipment maker quietly released patches with version 4.22 of the platform. The development comes after Code White researcher Florian Hauser (frycos) …

Trojanized Security Software Hits South Korea Users in Supply-Chain Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers took the wraps off a novel supply chain attack in South Korea that abuses legitimate security software and stolen digital certificates to distribute remote administration tools (RATs) on target systems. Attributing the operation to the Lazarus Group, also …

Uncovered: APT ‘Hackers For Hire’ Target Financial, Entertainment Firms

Blog WriterThe Hacker News - Original news source is thehackernews.com

A hackers-for-hire operation has been discovered using a strain of previously undocumented malware to target South Asian financial institutions and global entertainment companies. Dubbed “CostaRicto” by Blackberry researchers, the campaign appears to be the handiwork of APT mercenaries who possess …

SAD DNS — New Flaws Re-Enable DNS Cache Poisoning Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from the University of California and Tsinghua University has uncovered a series of critical security flaws that could lead to a revival of DNS cache poisoning attacks. Dubbed “SAD DNS attack” (short for Side-channel AttackeD DNS), …

Live Webinar: Reducing Complexity by Increasing Consolidation for SMEs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Complexity is the bane of effective cybersecurity. The need to maintain an increasing array of cybersecurity tools to protect organizations from an expanding set of cyber threats is leading to runaway costs, staff inefficiencies, and suboptimal threat response. Small to …

New ModPipe Point of Sale (POS) Malware Targeting Restaurants, Hotels

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today disclosed a new kind of modular backdoor that targets point-of-sale (POS) restaurant management software from Oracle in an attempt to pilfer sensitive payment information stored in the devices. The backdoor — dubbed “ModPipe” — impacts Oracle MICROS …

MISSIONS — The Next Level of Interactive Developer Security Training

Blog WriterThe Hacker News - Original news source is thehackernews.com

If organizations want to get serious about software security, they need to empower their engineers to play a defensive role against cyberattacks as they craft their code. The problem is, developers haven’t had the most inspiring introduction to security training …

Two New Chrome 0-Days Under Active Attacks – Update Your Browser

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has patched two more zero-day flaws in the Chrome web browser for desktop, making it the fourth and fifth actively exploited vulnerabilities addressed by the search giant in recent weeks. The company released 86.0.4240.198 for Windows, Mac, and Linux, which it …

Build Your 2021 Cybersecurity Plan With This Free PPT Template

Blog WriterThe Hacker News - Original news source is thehackernews.com

The end of the year is coming, and it’s time for security decision-makers to make plans for 2021 and get management approval. Typically, this entails making a solid case regarding why current resources, while yielding significant value, need to be …

Over 2800 e-Shops Running Outdated Magento Software Hit by Credit Card Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A wave of cyberattacks against retailers running the Magento 1.x e-commerce platform earlier this September has been attributed to one single group, according to the latest research. “This group has carried out a large number of diverse Magecart attacks that …