Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user’s sensitive data, execute arbitrary code, and possibly lead to remote code execution. The findings come from …

Managed Service Provider? Watch This Video to Learn about Autonomous XDR

Blog WriterThe Hacker News - Original news source is thehackernews.com

As managed security service providers, you’re always on the lookout for new platforms. One that can generate further business, enables you to scale easily without investing in more human resources and provides that value immediately. In the meanwhile, your clients …

Hackers Exploit IT Monitoring Tool Centreon to Target Several French Entities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Russia-linked state-sponsored threat actor known as Sandworm has been linked to a three-year-long stealthy operation to hack targets by exploiting an IT monitoring tool called Centreon. The intrusion campaign — which breached “several French entities” — is said to have …

A Sticker Sent On Telegram Could Have Exposed Your Secret Chats

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Monday disclosed details of a now-patched flaw in the Telegram messaging app that could have exposed users’ secret messages, photos, and videos to remote malicious actors. The issues were discovered by Italy-based Shielder in iOS, Android, and …

Apple will proxy Safe Browsing requests to hide iOS users’ IP from Google

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple’s upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google. A built-in security-focused …

Yandex Employee Caught Selling Access to Users’ Email Inboxes

Blog WriterThe Hacker News - Original news source is thehackernews.com

Russian Dutch-domiciled search engine, ride-hailing and  email service provider Yandex on Friday disclosed a data breach that compromised 4,887 email accounts of its users. The company blamed the incident on an unnamed employee who had been providing unauthorized access to …

Researchers Uncover Android Spying Campaign Targeting Pakistan Officials

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two new Android surveillanceware families have been found to target military, nuclear, and election entities in Pakistan and Kashmir as part of a pro-India, state-sponsored hacking campaign. Dubbed Hornbill and Sunbird, the malware impersonates legitimate or seemingly innocuous services to …

Secret Chat in Telegram Left Self-Destructing Media Files On Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Popular messaging app Telegram fixed a privacy-defeating bug in its macOS app that made it possible to access self-destructing audio and video messages long after they disappeared from secret chats. The vulnerability was discovered by security researcher Dhiraj Mishra in version 7.3 …

10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S. …

The Weakest Link in Your Security Posture: Misconfigured SaaS Settings

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the era of hacking and malicious actors, a company’s cloud security posture is a concern that preoccupies most, if not all, organizations. Yet even more than that, it is the SaaS Security Posture Management (SSPM) that is critical to …