Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk …

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on …

You Can Now Sign-in to You Microsoft Accounts Without a Password

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification …

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well …

3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of …

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such …

New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads

Blog WriterThe Hacker News - Original news source is thehackernews.com

Users searching for TeamViewer remote desktop software on search engines like Google are being redirected to malicious links that drop ZLoader malware onto their systems while simultaneously embracing a stealthier infection chain …

Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 to fix two actively exploited vulnerabilities, one of which defeated extra security protections built into the operating system. The …