How Does Your AD Password Policy Compare to NIST’s Password Recommendations?

Blog WriterThe Hacker News - Original news source is thehackernews.com

End-user passwords are one of the weakest components of your overall security protocols. Most users tend to reuse passwords across work and personal accounts. They may also choose relatively weak passwords that satisfy company password policies but can be easily …

ALERT: North Korean hackers targeting South Korea with RokRat Trojan

Blog WriterThe Hacker News - Original news source is thehackernews.com

A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government. Attributing the attack to APT37 (aka Starcruft, Ricochet Chollima, or Reaper), Malwarebytes said it identified a malicious document last December …

New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

Blog WriterThe Hacker News - Original news source is thehackernews.com

Hardware security keys—such as those from Google and Yubico—are considered the most secure means to protect accounts from phishing and takeover attacks. But a new research published on Thursday demonstrates how an adversary in possession of such a two-factor authentication …

SolarWinds Hackers Also Accessed U.S. Justice Department’s Email Server

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice on Wednesday became the latest government agency in the country to admit its internal network was compromised as part of the SolarWinds supply chain attack. “On December 24, 2020, the Department of Justice’s Office of …

WhatsApp Will Delete Your Account If You Don’t Agree Sharing Data With Facebook

Blog WriterThe Hacker News - Original news source is thehackernews.com

“Respect for your privacy is coded into our DNA,” opens WhatsApp’s privacy policy. “Since we started WhatsApp, we’ve aspired to build our Services with a set of strong privacy principles in mind.” But come February 8, 2021, this opening statement will …

Hackers Using Fake Trump’s Scandal Video to Spread QNode Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybesecurity researchers today revealed a new malspam campaign that distributes a remote access Trojan (RAT) by purporting to contain a sex scandal video of U.S. President Donald Trump. The emails, which carry with the subject line “GOOD LOAN OFFER!!,” come …

FBI, CISA, NSA Officially Blame Russia for SolarWinds Cyber Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Tuesday formally pointed fingers at the Russian government for orchestrating the massive SolarWinds supply chain attack that came to light early last month. “This work indicates that an Advanced Persistent Threat (APT) actor, likely Russian in origin, is …

Healthcare Industry Witnessed 45% Spike in Cyber Attacks Since Nov 20

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cyberattacks targeting healthcare organizations have spiked by 45% since November 2020 as COVID-19 cases continue to increase globally. According to a new report published by Check Point Research today and shared with The Hacker News, this increase has made the …

Warning: Cross-Platform ElectroRAT Malware Targeting Cryptocurrency Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today revealed a wide-ranging scam targeting cryptocurrency users that began as early as January last year to distribute trojanized applications to install a previously undetected remote access tool on target systems. Called ElectroRAT by Intezer, the RAT is …

Google Speech-to-Text API Can Help Attackers Easily Bypass Google reCAPTCHA

Blog WriterThe Hacker News - Original news source is thehackernews.com

A three-year-old attack technique to bypass Google’s audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy. Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept (PoC) of the attack on January 2. …