The Hacker News | #1 Trusted Cybersecurity News Site
WEBCybersecurity firm Sophos, which has been monitoring the cyber offensive, said it comprises three intrusion sets tracked as Cluster Alpha (STAC1248), Cluster Bravo (STAC1870), and Cluster Charlie (STAC1305). STAC is an abbreviation for "security threat activity cluster." "The attackers consistently used other compromised organizational and ...
Vulnerability | News & Insights | The Hacker News
WEBCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts. The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
data breach | News & Insights | The Hacker News
WEBThe operators of the mysterious Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances by leveraging a combination of both known and unknown security flaws. Targets include devices from TP-LINK, Zyxel, Asus, Axentra, D-Link, and NETGEAR, according to a new report by French cybersecurity …
News & Insights - The Hacker News
WEBYes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and threat updates for Hackers, Security researchers, technologists, and nerds.
cyber attack | News & Insights | The Hacker News
WEBGet Latest News in Your Inbox! Get the latest news, expert insights, exclusive resources, and strategies from industry leaders – all for free. Read the latest updates about cyber attack on The Hacker News cybersecurity and information technology publication.
Thousands of Oracle NetSuite Sites at Risk of Exposing Customer …
WEBAug 20, 2024 · Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information. Aug 20, 2024 Ravie Lakshmanan Enterprise Security / Data Breach. Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking …
hacking news | News & Insights | The Hacker News
WEB10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet. Apr 09, 2024 Botnet / Crypto Mining. A threat group of suspected Romanian origin called RUBYCARP has been observed maintaining a long-running botnet for carrying out crypto mining, distributed denial-of-service (DDoS), and phishing attacks. The group, believed to be …
Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS …
WEBAug 19, 2024 · Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. "Attackers can use Xeon to send messages through multiple software-as-a-service (SaaS) providers using valid credentials for the service providers," SentinelOne security …
Google Fixes High-Severity Chrome Flaw Actively Exploited in the …
WEBAug 22, 2024 · Google has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in the wild. Tracked as CVE-2024-7971, the vulnerability has been described as a type confusion bug in the V8 JavaScript and WebAssembly engine. "Type confusion in V8 in Google Chrome prior to …
Extremely Critical Log4J Vulnerability Leaves Much of the Internet …
WEBDec 11, 2021 · The Apache Software Foundation has released fixes to contain an actively exploited zero-day vulnerability affecting the widely-used Apache Log4j Java-based logging library that could be weaponized to execute malicious code and allow a complete takeover of vulnerable systems.. Tracked as CVE-2021-44228 and by the monikers Log4Shell or …