🚨 New backdoor called Zardoor used in cyberattack on Saudi Islamic charity, stealing data for over 2 years. Hackers use everyday tools like WMI to move undetected.

Read our full report: https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html

Concerned about the expanded attack surface in the cloud?

Wazuh, an open-source cybersecurity platform, provides real-time threat detection and incident response for your cloud environments.

Check it out: https://thehackernews.com/2024/02/wazuh-in-cloud-era-navigating.html

New banking trojan "Coyote" targeting 61 Brazilian banks.

It uses Nim and Node.js for evasion and the Squirrel installer framework for distribution. Coyote steals data and can take screenshots.

Learn more: https://thehackernews.com/2024/02/new-coyote-trojan-targets-61-brazilian.html

Stop chasing false alarms! Myrror prioritizes vulnerabilities by impact, not noise. Focus on what truly matters & defend against supply chain attacks.

Learn how to protect your code from hidden threats: https://thehackernews.com/2024/02/hands-on-review-myrror-security-code.html

⚠️ Android users, beware! A new variant of MoqHao malware silently auto-executes upon installation, snatching data, and hijacking Wi-Fi—all without you needing to lift a finger.

Learn more: https://thehackernews.com/2024/02/new-variant-of-moqhao-android-malware.html

🕵️‍♂️ Raspberry Robin malware has been spotted using new exploits and is now spreading via Discord for wider infection, while also being improved to make it stealthier than before.

Learn more: https://thehackernews.com/2024/02/raspberry-robin-malware-upgrades-with.html

U.S. Justice Department cracks down on cybercrime, seizing infrastructure used to sell the notorious "Warzone RAT" and arresting two individuals involved in its distribution and support.

Learn more: https://thehackernews.com/2024/02/us-doj-dismantles-warzone-rat.html

🙌 💻 Microsoft is bringing Linux-like Sudo for Windows 11, a new feature that allows users to run commands with administrator privileges without having to open a new elevated console window.

https://thehackernews.com/2024/02/microsoft-introduces-linux-like-sudo.html

🌍 The U.S. Department of State is offering up to 💰 $10 million for information on Hive ransomware operators, and an additional $5 million for those involved in Hive ransomware activities.

Read details here: https://thehackernews.com/2024/02/us-offers-10-million-bounty-for-info.html

🔒 CISA teams up with OpenSSF to introduce a framework called "Principles for Package Repository Security," aimed at fortifying open-source software ecosystems against cyber threats.

Learn more: https://thehackernews.com/2024/02/cisa-and-openssf-release-framework-for.html

Ever wondered why cyber attacks seem unstoppable? It's the identity blind spots! Check out how Silverfort's platform fills this crucial gap, ensuring rapid detection and containment of compromised accounts.

Learn more: https://thehackernews.com/2024/02/why-are-compromised-identities.html

A free Rhysida ransomware decryptor has been released!

Researchers have discovered a vulnerability in the Rhysida #malware, allowing them to develop a decryption tool.

Learn more: https://thehackernews.com/2024/02/rhysida-ransomware-cracked-free.html

🚨 CISA warns of an exploited vulnerability in Roundcube email software that could lead to information disclosure through malicious link references in plain text messages.

Learn more: https://thehackernews.com/2024/02/alert-cisa-warns-of-active-roundcube.html

🛑 Urgent: Hackers exploit Ivanti security flaw to deploy stealthy DSLog backdoor. Don't wait – factory reset appliances and apply the latest patches immediately.

Learn more: https://thehackernews.com/2024/02/ivanti-vulnerability-exploited-to.html

Data Detection & Response (DDR) is not just a buzzword.

Data protection has evolved in the cloud era, shifting focus from permissions and physical access.

To secure the dynamic cloud landscape, Sentra has released a tailored DDR guide.

Check it out: https://thehackernews.co/data-detection-and-response

PikaBot malware undergoes a dramatic transformation, simplifying its code and communication methods.

Click to learn more: https://thehackernews.com/2024/02/pikabot-resurfaces-with-streamlined.html

🚨Glupteba botnet upgrades with UEFI firmware stealth tech, making it undetectable by regular antivirus. This nasty malware steals info, mines #cryptocurrency , and attacks your router.

Learn more: https://thehackernews.com/2024/02/glupteba-botnet-evades-detection-with.html

⚠️ Zero-day alert!

💻 Microsoft released security patches for 73 flaws in its software for February 2024. This includes 5 critical and 2 actively exploited zero-day vulnerabilities.

Details here: https://thehackernews.com/2024/02/microsoft-rolls-out-patches-for-73.html

Don't wait, 🛡️ update your systems now.

🚨 ALERT: Beware, traders!

Hackers are exploiting a ZERO-DAY flaw in Microsoft Defender SmartScreen to deliver DarkMe malware. This sophisticated attack can steal your data and give hackers access to your financial accounts.

Learn more: https://thehackernews.com/2024/02/darkme-malware-targets-traders-using.html

🔐 Legacy accounts, bad OAuth hygiene—how major companies get hacked. Nation-state actors are exploiting flaws in common SaaS management.

Security can't be on auto-pilot. Find out how to improve your SaaS security posture: https://thehackernews.com/2024/02/midnight-blizzard-and-cloudflare.html

🚨 Bumblebee, QakBot, Zloader, & PikaBot are back, targeting U.S. organizations with sophisticated phishing tactics.

Learn more: https://thehackernews.com/2024/02/bumblebee-malware-returns-with-new.html

Be wary of suspicious emails or downloads – these threats are sneakier than ever.