Google to Auto-Reset Unused Android App Permissions for Billions of Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Friday said it’s bringing an Android 11 feature that auto-resets permissions granted to apps that haven’t been used in months, to devices running Android versions 6 and above. …

Numando: A New Banking Trojan Targeting Latin American Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest …

Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

Blog WriterThe Hacker News - Original news source is thehackernews.com

A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale …

Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control …

Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk …

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on …

You Can Now Sign-in to You Microsoft Accounts Without a Password

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification …

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well …

3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of …