ProtonMail Shares Activist’s IP Address With Authorities Despite Its “No Log” Claims

Blog WriterThe Hacker News - Original news source is thehackernews.com

End-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in …

Critical Auth Bypass Bug Affect NETGEAR Smart Switches — Patch and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking, storage and security solutions provider Netgear on Friday issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of …

Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0-Day Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has shared technical details about a now-fixed, actively exploited critical security vulnerability affecting SolarWinds Serv-U managed file transfer service that it has attributed with “high confidence” to a threat …

Apple Delays Plans to Scan Devices for Child Abuse Images After Privacy Backlash

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple is temporarily hitting the pause button on its controversial plans to screen users’ devices for child sexual abuse material (CSAM) after receiving sustained blowback over worries that the tool could be …

U.S. Cyber Command Warns of Ongoing Attacks Exploiting Atlassian Confluence Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cyber Command on Friday warned of ongoing mass exploitation attempts in the wild targeting a now-patched critical security vulnerability affecting Atlassian Confluence deployments that could be abused by …

Cisco Issues Patch for Critical Enterprise NFVIS Flaw — PoC Exploit Available

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has patched a critical security vulnerability impacting its Enterprise Network Function Virtualization Infrastructure Software (NFVIS) that could be exploited by an attacker to take control of an affected system. …

FIN7 Hackers Using Windows 11 Themed Documents to Drop Javascript Backdoor

Blog WriterThe Hacker News - Original news source is thehackernews.com

A recent wave of spear-phishing campaigns leveraged weaponized Windows 11 Alpha-themed Word documents with Visual Basic macros to drop malicious payloads, including a JavaScript implant, against a point-of-sale (PoS) service …

New BrakTooth Flaws Leave Millions of Bluetooth-enabled Devices Vulnerable

Blog WriterThe Hacker News - Original news source is thehackernews.com

A set of new security vulnerabilities has been disclosed in commercial Bluetooth stacks that could enable an adversary to execute arbitrary code and, worse, crash the devices via denial-of-service (DoS) …