15-Year-Old Bug in PEAR PHP Repository Could’ve Enabled Supply Chain Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish …

Results Overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm Edition

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most …

Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with …

Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two new security vulnerabilities have been disclosed in Rockwell Automation’s programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on …

Russian Wiper Malware Likely Behind Recent Cyberattack on Viasat KA-SAT Modems

Blog WriterThe Hacker News - Original news source is thehackernews.com

The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence …

North Korean Hackers Distributing Trojanized DeFi Wallet Apps to Steal Victims’ Crypto

Blog WriterThe Hacker News - Original news source is thehackernews.com

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to …

Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed …

Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of …

Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread

Blog WriterThe Hacker News - Original news source is thehackernews.com

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets. …