Critical LFI Vulnerability Reported in Hashnode Blogging Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server’s IP …

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. “NGINX Open Source and NGINX Plus …

E.U. Officials Reportedly Targeted with Israeli Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report from Reuters. At least five individuals, including European Justice Commissioner Didier …

Google Sues Scammer for Running ‘Puppy Fraud Scheme’ Website

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday disclosed that it’s taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. “The actor …

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. “The TDS has infected various web servers …

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. “Designed to send stolen credentials and cookies to a …

Microsoft’s New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. “This service will keep Windows and …

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Blog WriterThe Hacker News - Original news source is thehackernews.com

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a “high-level hacker” in the financially motivated group FIN7. Denys Iarmak, …