The Hacker News | #1 Trusted Cybersecurity News Site
WEBCybersecurity firm Sophos, which has been monitoring the cyber offensive, said it comprises three intrusion sets tracked as Cluster Alpha (STAC1248), Cluster Bravo (STAC1870), and Cluster Charlie (STAC1305). STAC is an abbreviation for "security threat activity cluster." "The attackers consistently used other compromised organizational and ...
data breach | News & Insights | The Hacker News
WEBThe operators of the mysterious Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances by leveraging a combination of both known and unknown security flaws. Targets include devices from TP-LINK, Zyxel, Asus, Axentra, D-Link, and NETGEAR, according to a new report by French cybersecurity company Sekoia.
cyber attack | News & Insights | The Hacker News
WEBTop 3 Threat Report Insights for Q2 2024. Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability. Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks. 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London. Apple Vision Pro Vulnerability Exposed ...
Vulnerability | News & Insights | The Hacker News
WEBCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts. The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
News & Insights - The Hacker News
WEBYes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and threat updates for Hackers, Security researchers, technologists, and nerds.
The Hacker News Deals
WEBSwiftScan VIP: Lifetime Subscription. 2 Reviews. $59.99 $199.99. The Hacker News Deals scours the web for the newest software, gadgets & web services. Explore our giveaways, bundles, Pay What You Want deals & more.
hacking news | News & Insights | The Hacker News
WEB10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet. Apr 09, 2024 Botnet / Crypto Mining. A threat group of suspected Romanian origin called RUBYCARP has been observed maintaining a long-running botnet for carrying out crypto mining, distributed denial-of-service (DDoS), and phishing attacks. The group, believed to …
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
WEBMay 17, 2021 · Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of the campaign have been spotted starting ...
The Continuing Threat of Unpatched Security Vulnerabilities
WEBMar 8, 2022 · A report found that unpatched vulnerabilities are the most consistent and primary ransomware attack vectors. It was recorded that in 2021, 65 new vulnerabilities arose that were connected to ransomware. This was observed to be a twenty-nine percent growth compared to the number of vulnerabilities …
CISA Warns of Critical Jenkins Vulnerability Exploited in …
WEBAug 20, 2024 · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw impacting Jenkins to its Known Exploited Vulnerabilities catalog, following its exploitation in ransomware attacks.. The vulnerability, tracked as CVE-2024-23897 (CVSS score: 9.8), is a path traversal flaw that could lead to code execution. "Jenkins Command Line Interface (CLI) contains a path ...