PHP’s Git Server Hacked to Insert Secret Backdoor to Its Source code

Blog WriterThe Hacker News - Original news source is thehackernews.com

In yet another instance of a software supply chain attack, unidentified actors hacked the official Git server of the PHP programming language and pushed unauthorized updates to insert a secret backdoor …

Watch Out! That Android System Update May Contain A Powerful Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware …

OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS) attacks and bypass certificate verification. …

Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

IT infrastructure management provider SolarWinds on Thursday released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited …

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between …

Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

More than a week after Microsoft released a one-click mitigation tool to mitigate cyberattacks targeting on-premises Exchange servers, the company disclosed that patches have been applied to 92% of all internet-facing servers affected by …

Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco on Wednesday released software updates to address multiple vulnerabilities affecting its Jabber messaging clients across Windows, macOS, Android, and iOS. Successful exploitation of the flaws could permit an “attacker …