Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft is urging Azure users to update the PowerShell command-line tool as soon as possible to protect against a critical remote code execution vulnerability impacting .NET Core. The issue, tracked as CVE-2021-26701 (CVSS score: 8.1), affects PowerShell versions 7.0 and 7.1 and have been …

REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

Blog WriterThe Hacker News - Original news source is thehackernews.com

Amidst the massive supply-chain ransomware attack that triggered an infection chain compromising thousands of businesses on Friday, new details have emerged about how the notorious Russia-linked REvil cybercrime gang may have pulled off the unprecedented hack. The Dutch Institute for Vulnerability Disclosure …

Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors behind the notorious REvil cybercrime operation appear to have pushed ransomware via an update for Kaseya’s IT management software, hitting around 40 customers worldwide, in what’s an instance of a widespread supply-chain ransomware attack. “Beginning around mid-day (EST/US) …

Android Apps with 5.8 million Installs Caught Stealing Users’ Facebook Passwords

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google intervened to remove nine Android apps downloaded more than 5.8 million times from the company’s Play Store after the apps were caught furtively stealing users’ Facebook login credentials. “The applications were fully functional, which was supposed to weaken the …

Learn to Code — Get 2021 Master Bundle of 13 Online Courses @ 99% OFF

Blog WriterThe Hacker News - Original news source is thehackernews.com

Whether you are looking to turn into a full-time developer or simply increasing your earnings in your current niche, learning to code can be a smart move. It is a well-known fact that recruiters strive to recruit people with technical …

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called “mirai_ptea” that leverages an undisclosed vulnerability in digital video recorders (DVR) provided by KGUARD to propagate and carry out distributed denial-of-service (DDoS) attacks. Chinese security firm Netlab 360 pinned the …

Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

In yet another instance of software supply chain attack, unidentified hackers breached the website of MonPass, one of Mongolia’s major certificate authorities, to backdoor its installer software with Cobalt Strike binaries. The trojanized client was available for download between February 8, …

NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, according to a joint advisory published by intelligence agencies in the U.K. and U.S. The National Security Agency (NSA), Cybersecurity and …

New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has launched an updated version of Scorecards, its automated security tool that produces a “risk score” for open source initiatives, with improved checks and capabilities to make the data generated by the utility accessible for analysis. “With so much software …

Microsoft Warns of Critical “PrintNightmare” Flaw Being Exploited in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday officially confirmed that the “PrintNightmare” remote code execution (RCE) vulnerability affecting Windows Print Spooler is different from the issue the company addressed as part of its Patch Tuesday update released earlier this month, while warning that it …