A Simple 5-Step Framework to Minimize the Risk of a Data Breach

Blog WriterThe Hacker News - Original news source is thehackernews.com

Today’s businesses run on data. They collect it from customers at every interaction, and they use it to improve efficiency, increase their agility, and provide higher levels of service. But it’s becoming painfully obvious that all of that data businesses …

FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Federal Bureau of Investigation (FBI) has disclosed that an unidentified threat actor has been exploiting a previously unknown weakness in the FatPipe MPVPN networking devices at least since May 2021 to obtain an initial foothold and maintain persistent …

Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking equipment company Netgear has released yet another round of patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Tracked as CVE-2021-34991 (CVSS score: 8.8), the pre-authentication buffer overflow flaw in …

New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have demonstrated yet another variant of the SAD DNS cache poisoning attack that leaves about 38% of the domain name resolvers vulnerable, enabling attackers to redirect traffic originally destined to legitimate websites to a server under their control. “The attack allows …

How to Build a Security Awareness Training Program that Yields Measurable Results

Blog WriterThe Hacker News - Original news source is thehackernews.com

Organizations have been worrying about cyber security since the advent of the technological age. Today, digital transformation coupled with the rise of remote work has made the need for security awareness all the more critical. Cyber security professionals are continuously …

Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities

Blog WriterThe Hacker News - Original news source is thehackernews.com

A malicious campaign has been found leveraging a technique called domain fronting to hide command-and-control traffic by leveraging a legitimate domain owned by the Myanmar government to route communications to an attacker-controlled server with the goal of evading detection. The …

U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity agencies from Australia, the U.K., and the U.S. on Wednesday released a joint advisory warning of active exploitation of Fortinet and Microsoft Exchange ProxyShell vulnerabilities by Iranian state-sponsored actors to gain initial access to vulnerable systems for follow-on activities, including data …

Israel’s Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East

Blog WriterThe Hacker News - Original news source is thehackernews.com

Israeli spyware vendor Candiru, which was added to an economic blocklist by the U.S. government this month, is said to have reportedly waged “watering hole” attacks against high-profile entities in the U.K. and the Middle East, new findings reveal. “The victimized websites …

On-Demand Webinar: Into the Cryptoverse

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the span of a few years, cryptocurrencies have gone from laughingstock and novelty to a serious financial instrument, and a major sector in high-tech. The price of Bitcoin and Ethereum has gone from single dollars to thousands, and they’re …

Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta, the company formerly known as Facebook, announced Tuesday that it took action against four separate malicious cyber groups from Pakistan and Syria who were found targeting people in Afghanistan, as well as journalists, humanitarian organizations, and anti-regime military forces …