Critical SaltStack RCE Bug (CVSS Score 10) Affects Thousands of Data Centers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two severe security flaws have been discovered in the open-source SaltStack Sat configuration framework that could allow an adversary to execute arbitrary code on remote servers deployed in data centers and cloud environments. The vulnerabilities were identified by F-Secure researchers …

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named “VictoryGate,” has been active since …

CISA Warns Patched Pulse Secure VPNs Could Still Expose Organizations to Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

The United States Cybersecurity and Infrastructure Security Agency (CISA) yesterday issued a fresh advisory alerting organizations to change all their Active Directory credentials as a defense against cyberattacks trying to leverage a known remote code execution (RCE) vulnerability in Pulse …

7 Ways Hackers and Scammers Are Exploiting Coronavirus Panic

Blog WriterThe Hacker News - Original news source is thehackernews.com

In our previous stories, you might have already read about various campaigns warning how threat actors are capitalizing on the ongoing coronavirus pandemic in an attempt to infect your computers and mobile devices with malware or scam you out of …

How Just Visiting A Site Could Have Hacked Your iPhone or MacBook Camera

Blog WriterThe Hacker News - Original news source is thehackernews.com

If you use Apple iPhone or MacBook, here we have a piece of alarming news for you. Turns out merely visiting a website — not just malicious but also legitimate sites unknowingly loading malicious ads as well — using Safari …

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers with Qihoo 360’s NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploited two …

New Android Cookie-Stealing Malware Found Hijacking Facebook Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new simple but dangerous strain of Android malware has been found in the wild that steals users’ authentication cookies from the web browsing and other apps, including Chrome and Facebook, installed on the compromised devices. Dubbed “Cookiethief” by Kaspersky …

This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years

Blog WriterThe Hacker News - Original news source is thehackernews.com

All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled security technology that are otherwise designed to shield sensitive data of users even when a system gets compromised. …

GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat

Blog WriterThe Hacker News - Original news source is thehackernews.com

If your web server is running on Apache Tomcat, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it. Yes, that’s possible because all versions (9.x/8.x/7.x/6.x) of the Apache …

U.S. Charges Huawei with Stealing Trade Secrets from 6 Companies

Blog WriterThe Hacker News - Original news source is thehackernews.com

The US Department of Justice (DoJ) and the Federal Bureau of Investigation (FBI) charged Huawei with racketeering and conspiring to steal trade secrets from six US firms, in a significant escalation of a lawsuit against the Chinese telecom giant that …