NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

Blog WriterThe Hacker News - Original news source is thehackernews.com

The digital security team at the U.K. National Health Service (NHS) has raised the alarm on active exploitation of Log4Shell vulnerabilities in unpatched VMware Horizon servers by an unknown threat actor to …

New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a novel technique by which malware on iOS can achieve persistence on an infected device by faking its shutdown process, making it impossible to physically determine if …

VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an “important” security vulnerability that could be weaponized by a threat actor to take control of affected systems. …

New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification

Blog WriterThe Hacker News - Original news source is thehackernews.com

An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft’s digital signature verification to siphon user credentials and sensitive information. Israeli cybersecurity company Check …

Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have taken the wraps of an organized financial-theft operation undertaken by a discreet actor to target transaction processing systems and siphon funds from entities primarily located in Latin …

Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than 100 real estate websites operated by Sotheby’s Realty that involved injecting malicious skimmers to …

Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy malware on vulnerable systems. “Exploitation …

Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Trojanized installers of the Telegram messaging application are being used to distribute the Windows-based Purple Fox backdoor on compromised systems. That’s according to new research published by Minerva Labs, describing …