⚠️ Patch Alert → Critical vulnerability in JetBrains' TeamCity On-Premises (CVE-2024-23917) allows unauthenticated remote attackers to gain administrative control and take over servers.
Learn more: https://thehackernews.com/2024/02/critical-jetbrains-teamcity-on-premises.html
Learn more: https://thehackernews.com/2024/02/critical-jetbrains-teamcity-on-premises.html
😱11😁7👍6
🕵️ Chinese state-backed hackers exploited FortiOS SSL-VPN flaws to breach a Dutch military network, deploying a stealthy backdoor called COATHANGER.
Learn more: https://thehackernews.com/2024/02/chinese-hackers-exploited-fortigate.html
Learn more: https://thehackernews.com/2024/02/chinese-hackers-exploited-fortigate.html
🤔13👍9👏3🤯3
Governments and tech giants such as France, the U.K., the U.S., Google, Meta, and Microsoft have joined forces to combat the misuse of commercial spyware for human rights violations.
Learn more: https://thehackernews.com/2024/02/global-coalition-and-tech-giants-unite.html
Learn more: https://thehackernews.com/2024/02/global-coalition-and-tech-giants-unite.html
👍29🤔6
2024 marks the rise of vCISO services, with 45% of MSPs and MSSPs joining the trend. Position yourself as a cybersecurity leader.
Watch the webinar for a 5-phase action plan to vCISO success: https://thehackernews.com/2024/02/new-webinar-5-steps-to-vciso-success.html
Watch the webinar for a 5-phase action plan to vCISO success: https://thehackernews.com/2024/02/new-webinar-5-steps-to-vciso-success.html
👍15
🔥 A critical vulnerability has been found in the shim bootloader, leaving millions of Linux systems vulnerable to attack.
Learn more about CVE-2023-40547: https://thehackernews.com/2024/02/critical-bootloader-vulnerability-in.html
Update your device immediately if it uses shim and Secure Boot.
Learn more about CVE-2023-40547: https://thehackernews.com/2024/02/critical-bootloader-vulnerability-in.html
Update your device immediately if it uses shim and Secure Boot.
🤯23⚡6👍5😱5👏1
🚨 Exciting News from ANYRUN:
Introducing Threat Intelligence Lookup! 🚀
Unlock contextual data and malware samples related to specific #IOCs, TTPs, and keywords, speeding up your investigations and boosting your cybersecurity defenses.
Try it now! 🔍 https://thehackernews.co/496HXQ1
Introducing Threat Intelligence Lookup! 🚀
Unlock contextual data and malware samples related to specific #IOCs, TTPs, and keywords, speeding up your investigations and boosting your cybersecurity defenses.
Try it now! 🔍 https://thehackernews.co/496HXQ1
any.run
Threat Intelligence Lookup, a searchable database of IOCs and events for threat hunting
Access cyber threat intelligence online with TI Lookup, a vast repository of threat data extracted from ANY.RUN's malware analysis sessions. Identify threats and discover context information related to specific IOCs, TTPs, and artifacts in processes, command…
👍20😁5🤔4👏1
🔔 URGENT: Cisco, Fortinet, and VMware have (again!) released patches for new critical vulnerabilities in their products.
Patch immediately to prevent device takeover, data theft, and operational disruption.
Learn more: https://thehackernews.com/2024/02/critical-patches-released-for-new-flaws.html
Patch immediately to prevent device takeover, data theft, and operational disruption.
Learn more: https://thehackernews.com/2024/02/critical-patches-released-for-new-flaws.html
👍20🤔11🔥6🤯5
⚠️ North Korean APT Kimsuky caught using new Golang-based info stealer "Troll Stealer" & malware "GoBear," both signed with stolen certificates, targeting sensitive data like SSH keys, browser data & system info.
Learn more → https://thehackernews.com/2024/02/kimsukys-new-golang-stealer-troll-and.html
Learn more → https://thehackernews.com/2024/02/kimsukys-new-golang-stealer-troll-and.html
👍13🔥6🤯5😁2
Google starts blocking sideloading of shady Android apps in Singapore. This pilot program targets apps that could potentially abuse permissions to steal one-time passwords and sensitive data.
Learn more: https://thehackernews.com/2024/02/google-starts-blocking-sideloading-of.html
Learn more: https://thehackernews.com/2024/02/google-starts-blocking-sideloading-of.html
🤔10👍9⚡1😁1
🚨 Alert: HijackLoader malware evolves with stealthier defense evasion techniques, posing a greater challenge to cybersecurity defenses.
This malware is getting smarter and harder to detect. Click to learn more: https://thehackernews.com/2024/02/hijackloader-evolves-researchers-decode.html
This malware is getting smarter and harder to detect. Click to learn more: https://thehackernews.com/2024/02/hijackloader-evolves-researchers-decode.html
👍11🔥7⚡5
Unified identity isn't just a buzzword—it's a game-changer in cybersecurity. Discover how consolidating identity challenges can bolster your organization's security posture.
Read: https://thehackernews.com/2024/02/unified-identity-look-for-meaning.html
Read: https://thehackernews.com/2024/02/unified-identity-look-for-meaning.html
👍12🤔7🔥3⚡1
Chinese state-sponsored hacking group, Volt Typhoon, infiltrates U.S. critical infrastructure networks for over five years, posing a significant threat to essential services.
Read: https://thehackernews.com/2024/02/chinese-hackers-operate-undetected-in.html
Read: https://thehackernews.com/2024/02/chinese-hackers-operate-undetected-in.html
🤯14👍11😁8🔥6👏4⚡1🤔1
🚨 Deja Vu for Ivanti users!
Another authentication bypass security vulnerability (CVE-2024-22024) has been found in #Ivanti products, affecting Connect Secure, Policy Secure, and ZTA gateways.
Details: https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
Don't wait, patch ASAP to secure your devices!
Another authentication bypass security vulnerability (CVE-2024-22024) has been found in #Ivanti products, affecting Connect Secure, Policy Secure, and ZTA gateways.
Details: https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
Don't wait, patch ASAP to secure your devices!
👍16⚡6
🛑 Urgent: Patch it now - Hackers are exploiting it!
Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.
Learn more: https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html
Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.
Learn more: https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html
👍10🔥10⚡7😁3
🚨 New backdoor called Zardoor used in cyberattack on Saudi Islamic charity, stealing data for over 2 years. Hackers use everyday tools like WMI to move undetected.
Read our full report: https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html
Read our full report: https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html
👍10😁9⚡6
Concerned about the expanded attack surface in the cloud?
Wazuh, an open-source cybersecurity platform, provides real-time threat detection and incident response for your cloud environments.
Check it out: https://thehackernews.com/2024/02/wazuh-in-cloud-era-navigating.html
Wazuh, an open-source cybersecurity platform, provides real-time threat detection and incident response for your cloud environments.
Check it out: https://thehackernews.com/2024/02/wazuh-in-cloud-era-navigating.html
👍26⚡4🔥2👏1
New banking trojan "Coyote" targeting 61 Brazilian banks.
It uses Nim and Node.js for evasion and the Squirrel installer framework for distribution. Coyote steals data and can take screenshots.
Learn more: https://thehackernews.com/2024/02/new-coyote-trojan-targets-61-brazilian.html
It uses Nim and Node.js for evasion and the Squirrel installer framework for distribution. Coyote steals data and can take screenshots.
Learn more: https://thehackernews.com/2024/02/new-coyote-trojan-targets-61-brazilian.html
🔥10👍9⚡3
Stop chasing false alarms! Myrror prioritizes vulnerabilities by impact, not noise. Focus on what truly matters & defend against supply chain attacks.
Learn how to protect your code from hidden threats: https://thehackernews.com/2024/02/hands-on-review-myrror-security-code.html
Learn how to protect your code from hidden threats: https://thehackernews.com/2024/02/hands-on-review-myrror-security-code.html
👍15🔥1
⚠️ Android users, beware! A new variant of MoqHao malware silently auto-executes upon installation, snatching data, and hijacking Wi-Fi—all without you needing to lift a finger.
Learn more: https://thehackernews.com/2024/02/new-variant-of-moqhao-android-malware.html
Learn more: https://thehackernews.com/2024/02/new-variant-of-moqhao-android-malware.html
😱23👍8🔥2
🕵️♂️ Raspberry Robin malware has been spotted using new exploits and is now spreading via Discord for wider infection, while also being improved to make it stealthier than before.
Learn more: https://thehackernews.com/2024/02/raspberry-robin-malware-upgrades-with.html
Learn more: https://thehackernews.com/2024/02/raspberry-robin-malware-upgrades-with.html
🔥23👍9🤔3