Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up in the device’s wallet. “An attacker …

Incentivizing Developers is the Key to Better Security Practices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Professional developers want to embrace DevSecOps and write secure code, but their organizations need to support this seachange if they want that effort to grow. The cyber threat landscape is becoming more complex by the day. Attackers are constantly scanning …

New Azure AD Bug Lets Hackers Brute-Force Passwords Without Getting Caught

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed an unpatched security vulnerability in the protocol used by Microsoft Azure Active Directory that potential adversaries could abuse to stage undetected brute-force attacks. “This flaw allows threat actors to perform single-factor brute-force attacks against Azure Active …

Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday pushed urgent security fixes for its Chrome browser, including a pair of new security weaknesses that the company said are being exploited in the wild, making them the fourth and fifth actively zero-days plugged this month alone. …

New Tomiris Backdoor Found Linked to Hackers Behind SolarWinds Cyberattack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday disclosed a previously undocumented backdoor likely designed and developed by the Nobelium advanced persistent threat (APT) behind last year’s SolarWinds supply chain attack, joining the threat actor’s ever-expanding arsenal of hacking tools. Moscow-headquartered firm Kaspersky codenamed the …

Here’s a New Free Tool to Discover Unprotected Cloud Storage Instances

Blog WriterThe Hacker News - Original news source is thehackernews.com

The IDC cloud security survey 2021 states that as many as 98% of companies were victims of a cloud data breach within the past 18 months. Fostered by the pandemic, small and large organizations from all over the world are …

Cybersecurity Firm Group-IB’s CEO Arrested Over Treason Charges in Russia

Blog WriterThe Hacker News - Original news source is thehackernews.com

Russian authorities on Wednesday arrested and detained Ilya Sachkov, the founder of cybersecurity firm Group-IB, for two months in Moscow on charges of state treason following a search of its office on September 28. The Russian company, which is headquartered in Singapore, …

Facebook Releases New Tool That Finds Security and Privacy Bugs in Android Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

Facebook on Wednesday announced it’s open-sourcing Mariana Trench, an Android-focused static analysis platform the company uses to detect and prevent security and privacy bugs in applications created for the mobile operating system at scale. “[Mariana Trench] is designed to be able …

[eBook] Your First 90 Days as CISO — 9 Steps to Success

Blog WriterThe Hacker News - Original news source is thehackernews.com

Chief Information Security Officers (CISOs) are an essential pillar of an organization’s defense, and they must account for a lot. Especially for new CISOs, this can be a daunting task. The first 90 days for a new CISO are crucial …

Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly discovered “aggressive” mobile campaign has infected north of 10 million users from over 70 countries via seemingly innocuous Android apps that subscribe the individuals to premium services costing €36 (~$42) per month without their knowledge. Zimperium zLabs dubbed …