iPhones of 36 Journalists Hacked Using iMessage Zero-Click Exploit

Blog WriterThe Hacker News - Original news source is thehackernews.com

Three dozen journalists working for Al Jazeera had their iPhones stealthily compromised via a zero-click exploit to install spyware as part of a Middle East cyberespionage campaign. In a new report published …

Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack

Blog WriterThe Hacker News - Original news source is thehackernews.com

The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, …

Software Supply-Chain Attack Hits Vietnam Government Certification Authority

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today disclosed a new supply-chain attack targeting the Vietnam Government Certification Authority (VGCA) that compromised the agency’s digital signature toolkit to install a backdoor on victim systems. Uncovered …

Ransomware Attackers Using SystemBC Malware With RAT and Tor Proxy

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybercriminals are increasingly outsourcing the task of deploying ransomware to affiliates using commodity malware and attack tools, according to new research. In a new analysis published by Sophos today and …

New Evidence Suggests SolarWinds’ Codebase Was Hacked to Inject Backdoor

Blog WriterThe Hacker News - Original news source is thehackernews.com

The investigation into how the attackers managed to compromise SolarWinds’ internal network and poison the company’s software updates is still underway, but we may be one step closer to understanding …

SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Network monitoring services provider SolarWinds officially released a second hotfix to address a critical vulnerability in its Orion platform that was exploited to insert malware and breach public and private entities in …