ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw, which the company addressed late last month. …

TikTok Quietly Updated Its Privacy Policy to Collect Users’ Biometric Data

Blog WriterThe Hacker News - Original news source is thehackernews.com

Popular short-form video-sharing service TikTok quietly revised its privacy policy in the U.S., allowing it to automatically collect biometric information such as faceprints and voiceprints from the content its users …

Google Chrome to Help Users Identify Untrusted Extensions Before Installation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday said it’s rolling out new security features to Chrome browser aimed at detecting suspicious downloads and extensions via its Enhanced Safe Browsing feature, which it launched a …

10 Critical Flaws Found in CODESYS Industrial Automation Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Thursday disclosed as many as ten critical vulnerabilities impacting CODESYS automation software that could be exploited to remote code execution on programmable logic controllers (PLCs). “To exploit …

Necro Python Malware Upgrades With New Exploits and Crypto Mining Capabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

New upgrades have been made to a Python-based “self-replicating, polymorphic bot” called Necro in what’s seen as an attempt to improve its chances of infecting vulnerable systems and evading detection. …

Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A top Russian-language underground forum has been running a “contest” for the past month, calling on its community to submit “unorthodox” ways to conduct cryptocurrency attacks. The forum’s administrator, in …