A recently disclosed SSRF vulnerability (CVE-2024-21893) in Ivanti Connect Secure and Policy Secure products is now under mass exploitation.
Learn more: https://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html
Patch now to protect your organization from system takeover.
Learn more: https://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html
Patch now to protect your organization from system takeover.
👍12😱12⚡9
Job seekers, beware! A new cybercriminal group called ResumeLooters is targeting job search platforms in APAC, stealing millions of resumes and personal data.
Learn more: https://thehackernews.com/2024/02/hackers-exploit-job-boards-in-apac.html
Learn more: https://thehackernews.com/2024/02/hackers-exploit-job-boards-in-apac.html
😱20👍6😁4🤔4
Feeling overwhelmed by your sprawling SaaS stack?
You're not alone. Dramatically improve your SaaS Security posture with 201% ROI. New study reveals how a $10B media company achieved this with an SSPM platform.
Learn more: https://thehackernews.com/2024/02/how-10b-enterprise-customer-drastically.html
You're not alone. Dramatically improve your SaaS Security posture with 201% ROI. New study reveals how a $10B media company achieved this with an SSPM platform.
Learn more: https://thehackernews.com/2024/02/how-10b-enterprise-customer-drastically.html
👍12🔥5
🚨 Beware: Cybercriminals use fake Facebook job ads to spread Ov3r_Stealer, a Windows #malware. It steals sensitive information, risking your personal and financial data.
Read: https://thehackernews.com/2024/02/beware-fake-facebook-job-ads-spreading.html
Read: https://thehackernews.com/2024/02/beware-fake-facebook-job-ads-spreading.html
😁8👍6👏2🤔1
🛡️ Researchers uncover details of 3 vulnerabilities in Azure HDInsight's Apache Hadoop, Kafka, and Spark services that could have allowed attackers root access and system disruption.
Learn more: https://thehackernews.com/2024/02/high-severity-flaws-found-in-azure.html
Learn more: https://thehackernews.com/2024/02/high-severity-flaws-found-in-azure.html
👍21🤯3👏2😁1
⚠️ Patch Alert → Critical vulnerability in JetBrains' TeamCity On-Premises (CVE-2024-23917) allows unauthenticated remote attackers to gain administrative control and take over servers.
Learn more: https://thehackernews.com/2024/02/critical-jetbrains-teamcity-on-premises.html
Learn more: https://thehackernews.com/2024/02/critical-jetbrains-teamcity-on-premises.html
😱11😁7👍6
🕵️ Chinese state-backed hackers exploited FortiOS SSL-VPN flaws to breach a Dutch military network, deploying a stealthy backdoor called COATHANGER.
Learn more: https://thehackernews.com/2024/02/chinese-hackers-exploited-fortigate.html
Learn more: https://thehackernews.com/2024/02/chinese-hackers-exploited-fortigate.html
🤔13👍9👏3🤯3
Governments and tech giants such as France, the U.K., the U.S., Google, Meta, and Microsoft have joined forces to combat the misuse of commercial spyware for human rights violations.
Learn more: https://thehackernews.com/2024/02/global-coalition-and-tech-giants-unite.html
Learn more: https://thehackernews.com/2024/02/global-coalition-and-tech-giants-unite.html
👍29🤔6
2024 marks the rise of vCISO services, with 45% of MSPs and MSSPs joining the trend. Position yourself as a cybersecurity leader.
Watch the webinar for a 5-phase action plan to vCISO success: https://thehackernews.com/2024/02/new-webinar-5-steps-to-vciso-success.html
Watch the webinar for a 5-phase action plan to vCISO success: https://thehackernews.com/2024/02/new-webinar-5-steps-to-vciso-success.html
👍15
🔥 A critical vulnerability has been found in the shim bootloader, leaving millions of Linux systems vulnerable to attack.
Learn more about CVE-2023-40547: https://thehackernews.com/2024/02/critical-bootloader-vulnerability-in.html
Update your device immediately if it uses shim and Secure Boot.
Learn more about CVE-2023-40547: https://thehackernews.com/2024/02/critical-bootloader-vulnerability-in.html
Update your device immediately if it uses shim and Secure Boot.
🤯23⚡6👍5😱5👏1
🚨 Exciting News from ANYRUN:
Introducing Threat Intelligence Lookup! 🚀
Unlock contextual data and malware samples related to specific #IOCs, TTPs, and keywords, speeding up your investigations and boosting your cybersecurity defenses.
Try it now! 🔍 https://thehackernews.co/496HXQ1
Introducing Threat Intelligence Lookup! 🚀
Unlock contextual data and malware samples related to specific #IOCs, TTPs, and keywords, speeding up your investigations and boosting your cybersecurity defenses.
Try it now! 🔍 https://thehackernews.co/496HXQ1
any.run
Threat Intelligence Lookup, a searchable database of IOCs and events for threat hunting
Access cyber threat intelligence online with TI Lookup, a vast repository of threat data extracted from ANY.RUN's malware analysis sessions. Identify threats and discover context information related to specific IOCs, TTPs, and artifacts in processes, command…
👍20😁5🤔4👏1
🔔 URGENT: Cisco, Fortinet, and VMware have (again!) released patches for new critical vulnerabilities in their products.
Patch immediately to prevent device takeover, data theft, and operational disruption.
Learn more: https://thehackernews.com/2024/02/critical-patches-released-for-new-flaws.html
Patch immediately to prevent device takeover, data theft, and operational disruption.
Learn more: https://thehackernews.com/2024/02/critical-patches-released-for-new-flaws.html
👍20🤔11🔥6🤯5
⚠️ North Korean APT Kimsuky caught using new Golang-based info stealer "Troll Stealer" & malware "GoBear," both signed with stolen certificates, targeting sensitive data like SSH keys, browser data & system info.
Learn more → https://thehackernews.com/2024/02/kimsukys-new-golang-stealer-troll-and.html
Learn more → https://thehackernews.com/2024/02/kimsukys-new-golang-stealer-troll-and.html
👍13🔥6🤯5😁2
Google starts blocking sideloading of shady Android apps in Singapore. This pilot program targets apps that could potentially abuse permissions to steal one-time passwords and sensitive data.
Learn more: https://thehackernews.com/2024/02/google-starts-blocking-sideloading-of.html
Learn more: https://thehackernews.com/2024/02/google-starts-blocking-sideloading-of.html
🤔10👍9⚡1😁1
🚨 Alert: HijackLoader malware evolves with stealthier defense evasion techniques, posing a greater challenge to cybersecurity defenses.
This malware is getting smarter and harder to detect. Click to learn more: https://thehackernews.com/2024/02/hijackloader-evolves-researchers-decode.html
This malware is getting smarter and harder to detect. Click to learn more: https://thehackernews.com/2024/02/hijackloader-evolves-researchers-decode.html
👍11🔥7⚡5
Unified identity isn't just a buzzword—it's a game-changer in cybersecurity. Discover how consolidating identity challenges can bolster your organization's security posture.
Read: https://thehackernews.com/2024/02/unified-identity-look-for-meaning.html
Read: https://thehackernews.com/2024/02/unified-identity-look-for-meaning.html
👍12🤔7🔥3⚡1
Chinese state-sponsored hacking group, Volt Typhoon, infiltrates U.S. critical infrastructure networks for over five years, posing a significant threat to essential services.
Read: https://thehackernews.com/2024/02/chinese-hackers-operate-undetected-in.html
Read: https://thehackernews.com/2024/02/chinese-hackers-operate-undetected-in.html
🤯14👍11😁8🔥6👏4⚡1🤔1
🚨 Deja Vu for Ivanti users!
Another authentication bypass security vulnerability (CVE-2024-22024) has been found in #Ivanti products, affecting Connect Secure, Policy Secure, and ZTA gateways.
Details: https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
Don't wait, patch ASAP to secure your devices!
Another authentication bypass security vulnerability (CVE-2024-22024) has been found in #Ivanti products, affecting Connect Secure, Policy Secure, and ZTA gateways.
Details: https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
Don't wait, patch ASAP to secure your devices!
👍16⚡6
🛑 Urgent: Patch it now - Hackers are exploiting it!
Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.
Learn more: https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html
Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.
Learn more: https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html
👍10🔥10⚡7😁3
🚨 New backdoor called Zardoor used in cyberattack on Saudi Islamic charity, stealing data for over 2 years. Hackers use everyday tools like WMI to move undetected.
Read our full report: https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html
Read our full report: https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html
👍10😁9⚡6
Concerned about the expanded attack surface in the cloud?
Wazuh, an open-source cybersecurity platform, provides real-time threat detection and incident response for your cloud environments.
Check it out: https://thehackernews.com/2024/02/wazuh-in-cloud-era-navigating.html
Wazuh, an open-source cybersecurity platform, provides real-time threat detection and incident response for your cloud environments.
Check it out: https://thehackernews.com/2024/02/wazuh-in-cloud-era-navigating.html
👍26⚡4🔥2👏1