CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity agencies from Australia, Canada, New Zealand, the U.S., and the U.K. on Wednesday released a joint advisory in response to widespread exploitation of multiple vulnerabilities in Apache’s Log4j software library by nefarious adversaries. “These vulnerabilities, especially Log4Shell, are severe,” …

4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories

Blog WriterThe Hacker News - Original news source is thehackernews.com

A security flaw has been unearthed in Microsoft’s Azure App Service that resulted in the exposure of source code of customer applications written in Java, Node, PHP, Python, and Ruby for at least four years since September 2017. The vulnerability, …

Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft said it won’t be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication platform earlier this March. The disclosure comes from Berlin-based cybersecurity firm Positive Security, …

New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with the goal of delivering Formbook malware. …

China suspends deal with Alibaba for not sharing Log4j 0-day first with the government

Blog WriterThe Hacker News - Original news source is thehackernews.com

China’s internet regulator, the Ministry of Industry and Information Technology (MIIT), has temporarily suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six months on account of the fact that it failed to …

Active Directory Bugs Could Let hackers Take Over Windows Domain Controllers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft is urging customers to patch two security vulnerabilities in Active Directory domain controllers that it addressed in November following the availability of a proof-of-concept (PoC) tool on December 12. The two vulnerabilities — tracked as CVE-2021-42278 and CVE-2021-42287 — have a severity rating of 7.5 …

Top 7 common Cybersecurity Myths — Busted

Blog WriterThe Hacker News - Original news source is thehackernews.com

Even with the growing awareness about cybersecurity, many myths about it are prevalent. These misconceptions can be a barrier to effective security.  The first step to ensure the security of your business is to separate the false information, myths, and …

Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector

Blog WriterThe Hacker News - Original news source is thehackernews.com

The transportation industry and government agencies related to the sector are the victims of an ongoing campaign since July 2020 by a sophisticated and well-equipped cyberespionage group in what appears to be yet another uptick in malicious activities that are …

Secret Backdoors Found in German-made Auerswald VoIP System

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol (VoIP) appliance from Auerswald, a German telecommunications hardware manufacturer, that could be abused to gain full administrative access to the …