New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting …

China suspends deal with Alibaba for not sharing Log4j 0-day first with the government

Blog WriterThe Hacker News - Original news source is thehackernews.com

China’s internet regulator, the Ministry of Industry and Information Technology (MIIT), has temporarily suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six …

Active Directory Bugs Could Let hackers Take Over Windows Domain Controllers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft is urging customers to patch two security vulnerabilities in Active Directory domain controllers that it addressed in November following the availability of a proof-of-concept (PoC) tool on December 12. The two …

Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector

Blog WriterThe Hacker News - Original news source is thehackernews.com

The transportation industry and government agencies related to the sector are the victims of an ongoing campaign since July 2020 by a sophisticated and well-equipped cyberespionage group in what appears …

Secret Backdoors Found in German-made Auerswald VoIP System

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol (VoIP) appliance from Auerswald, a German telecommunications hardware manufacturer, that …

New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service (DoS) and man-in-the-middle (MitM) attacks using …

Experts Discover Backdoor Deployed on the U.S. Federal Agency’s Network

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as a “classic APT-type …