E.U. Officials Reportedly Targeted with Israeli Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report from Reuters. At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, …

Finding Attack Paths in Cloud Environments

Blog WriterThe Hacker News - Original news source is thehackernews.com

The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations’ most sensitive business applications, workloads, and data are in the cloud. Hackers, good and bad, have noticed that trend and effectively evolved their …

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. “NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary …

Google Sues Scammer for Running ‘Puppy Fraud Scheme’ Website

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday disclosed that it’s taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. “The actor used a network of fraudulent websites that claimed to sell …

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. “The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, …

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. “Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim’s machines …

Microsoft’s New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. “This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional …

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Blog WriterThe Hacker News - Original news source is thehackernews.com

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a “high-level hacker” in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from …

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year. “At least some members of the new BlackCat group have links to the BlackMatter group, …

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

Blog WriterThe Hacker News - Original news source is thehackernews.com

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future’s …