Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Three JavaScript libraries uploaded to the official NPM package repository have been unmasked as crypto-mining malware, once again demonstrating how open-source software package repositories are becoming a lucrative target for …

Researchers Break Intel SGX With New ‘SmashEx’ CPU Attack Technique

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems. …

Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two Eastern European nationals have been sentenced in the U.S. for offering “bulletproof hosting” services to cybercriminals, who used the technical infrastructure to distribute malware and attack financial institutions across …

LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019

Blog WriterThe Hacker News - Original news source is thehackernews.com

A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting “highly specific information” from mobile communication …

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adversary to introduce malicious devices within …

Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break out of the sandbox restrictions and execute arbitrary code within …