The Hacker News7h
Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant
The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian government ...
The Hacker News8h
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Group-IB reveals Cicada3301 ransomware’s affiliate panel, targeting U.S. and U.K. sectors with cross-platform attacks.
The Hacker News9h
SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack
SideWinder APT launches stealthy multi-stage attacks, deploying StealerBot malware against critical entities in the Middle ...
The Hacker News14h
U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks
Sudanese brothers charged for 35,000 DDoS attacks targeting Microsoft, hospitals, and global networks in 2023.
The Hacker News18h
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
Critical Kubernetes Image Builder vulnerability CVE-2024-9486 patched to prevent root access via default credentials.
The Hacker News1d
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity
Cybercriminals abuse EDRSilencer to disable endpoint detection tools, making malicious activity harder to detect.
The Hacker News1d
FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms
The new specification proposed by the FIDO Alliance aims to address this gap with the Credential Exchange Protocol (CXP) and ...
The Hacker News1d
From Misuse to Abuse: AI Risks and Attacks
GPTs introduce potential security concerns. One notable risk is the exposure of sensitive instructions, proprietary knowledge ...
The Hacker News1d
North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw ...
The Hacker News1d
Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack
A spear-phishing campaign in Brazil uses fake tax files to deliver Astaroth malware, impacting key industries.
The Hacker News1d
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access
Update GitHub Enterprise Server to patch critical SSO bypass vulnerability (CVE-2024-9487). Protect against unauthorized access.
The Hacker News1d
CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) software to its Known Exploited Vulnerabilities ( ...