New Hacking Campaign Targeting Ukrainian Government with IcedID Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new wave of social engineering campaigns delivering IcedID malware and leveraging Zimbra exploits with the goal of stealing sensitive information. Attributing the IcedID phishing attacks to a threat …

GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. “An attacker abused stolen OAuth user tokens issued to two …

Get Lifetime Access to This 60-Hour Java Programming Training Bundle @ 97% Discount

Blog WriterThe Hacker News - Original news source is thehackernews.com

Java is a very versatile programming language. From Android apps to Oracle databases, it can be used to power a wide range of software and systems. As with most technical skills, the best way to learn Java is through building your own …

Lazarus Group Behind $540 Million Axie Infinity Crypto Hack and Attacks on Chemical Sector

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Treasury Department has implicated the North Korea-backed Lazarus Group (aka Hidden Cobra) in the theft of $540 million from video game Axie Infinity’s Ronin Network last month. On Thursday, the Treasury tied the Ethereum wallet address that received the stolen funds to …

As State-Backed Cyber Threats Grow, Here’s How the World Is Reacting

Blog WriterThe Hacker News - Original news source is thehackernews.com

With the ongoing conflict in Eurasia, cyberwarfare is inevitably making its presence felt. The fight is not only being fought on the fields. There is also a big battle happening in cyberspace. Several cyber-attacks have been reported over the past …

Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller (WLC) that could be abused by an unauthenticated, remote attacker to take control of an affected system. Tracked as CVE-2022-20695, the issue has been rated 10 …

Haskers Gang Gives Away ZingoStealer Malware to Other Cybercriminals for Free

Blog WriterThe Hacker News - Original news source is thehackernews.com

A crimeware-related threat actor known as Haskers Gang has released an information-stealing malware called ZingoStealer for free on, allowing other criminal groups to leverage the tool for nefarious purposes. “It features the ability to steal sensitive information from victims and can download …

JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as five security vulnerabilities have been addressed in Aethon Tug hospital robots that could enable remote attackers to seize control of the devices and interfere with the timely distribution of medication and lab samples. “Successful exploitation of these …

Ethereum Developer Jailed 63 Months for Helping North Korea Evade Sanctions

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country. “There …

Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case …