Category: Hacker News
Critical SimpleHelp Flaws Allow File Theft, Privil...
Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to informati...
Fortinet Warns of New Zero-Day Used in Attacks on ...
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management inter...
Zero-Day Vulnerability Suspected in Attacks on For...
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management inter...
Russian-Linked Hackers Target Kazakhstan in Espion...
Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremli...
CISA Adds Second BeyondTrust Flaw to KEV Catalog A...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Priv...
Hackers Exploit Aviatrix Controller Vulnerability ...
A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform has come under active expl...
⚡ THN Weekly Recap: Top Cybersecurity Threats, Too...
The cyber world’s been buzzing this week, and it’s all about staying ahead of the bad guys. From sneaky software bugs to advanced ...
Ransomware on ESXi: The Mechanization of Virtualiz...
In 2024, ransomware attacks targeting VMware ESXi servers reached alarming levels, with the average ransom demand skyrocketing to ...
Microsoft Uncovers macOS Vulnerability CVE-2024-44...
Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed ...
Google OAuth Vulnerability Exposes Millions via Fa...
New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a q...
4 Reasons Your SaaS Attack Surface Can No Longer b...
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl....
Illicit HuiOne Telegram Market Surpasses Hydra, Hi...
The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in...
WordPress Skimmers Evade Detection by Injecting Th...
Cybersecurity researchers are warning of a new stealthy credit card skimmer campaign that targets WordPress e-commerce checkout pa...
Expired Domains Allowed Control Over 4,000 Backdoo...
No less than 4,000 unique web backdoors previously deployed by various threat actors have been hijacked by taking control of aband...
DoJ Indicts Three Russians for Operating Crypto Mi...
The U.S. Department of Justice (DoJ) on Friday indicted three Russian nationals for their alleged involvement in operating the cry...
Taking the Pain Out of Cybersecurity Reporting: A ...
Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clie...
AI-Driven Ransomware FunkSec Targets 85 Victims Us...
Cybersecurity researchers have shed light on a nascent artificial intelligence (AI) assisted ransomware family called FunkSec that...
Microsoft Sues Hacking Group Exploiting Azure AI f...
Microsoft has revealed that it's pursuing legal action against a "foreign-based threat–actor group" for operating a hacking-as-a-s...
CrowdStrike Warns of Phishing Scam Targeting Job S...
Cybersecurity company CrowdStrike is alerting of a phishing campaign that exploits its own branding to distribute a cryptocurrency...
Major Vulnerabilities Patched in SonicWall, Palo A...
Palo Alto Networks has released software patches to address several security flaws in its Expedition migration tool, including a h...