Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control …

Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk …

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on …

You Can Now Sign-in to You Microsoft Accounts Without a Password

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification …

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well …

3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of …

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such …

New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads

Blog WriterThe Hacker News - Original news source is thehackernews.com

Users searching for TeamViewer remote desktop software on search engines like Google are being redirected to malicious links that drop ZLoader malware onto their systems while simultaneously embracing a stealthier infection chain …