The Hacker News | #1 Trusted Cybersecurity News Site
WEBCybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the legitimate …
Vulnerability | News & Insights | The Hacker News
WEBThe vulnerability has been codenamed CloudImposer by Tenable Research. "The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool," security researcher Liv Matan said in a report shared with The Hacker News.
German Authorities Dismantle Dark Web Hub 'Kingdom Market' in …
WEBDec 21, 2023 · German law enforcement has announced the disruption of a dark web platform called Kingdom Market that specialized in the sales of narcotics and malware to "tens of thousands of users.". The exercise, which involved collaboration from authorities from the U.S., Switzerland, Moldova, and Ukraine, began on December 16, 2023, the Federal Criminal Police Office (BKA) said.
Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited ...
WEBJan 17, 2024 · Google on Tuesday released updates to fix four security issues in its Chrome browser, including an actively exploited zero-day flaw. The issue, tracked as CVE-2024-0519, concerns an out-of-bounds memory access in the V8 JavaScript and WebAssembly engine, which can be weaponized by threat actors …
LastPass Admits to Severe Data Breach, Encrypted Password Vaults …
WEBDec 23, 2022 · The August 2022 security breach of LastPass may have been more severe than previously disclosed by the company.. The popular password management service on Thursday revealed that malicious actors obtained a trove of personal information belonging to its customers that include their encrypted password vaults by using data siphoned from the earlier break-in.
GitHub Says Hackers Breached Dozens of Organizations Using …
WEBApr 16, 2022 · Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. "An attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and …
Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, …
WEBSep 22, 2023 · Apple has released yet another round of security patches to address three actively exploited zero-day flaws impacting iOS, iPadOS, macOS, watchOS, and Safari, taking the total tally of zero-day bugs discovered in its software this year to 16. The list of security vulnerabilities is as follows -. CVE-2023-41991 - A certificate validation issue ...
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
WEBMay 17, 2021 · Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of the campaign have been spotted starting ...
Block Admits Data Breach Involving Cash App Data Accessed by …
WEBApr 6, 2022 · Block advertises Cash App as "the easiest way to send money, spend money, save money, and buy cryptocurrency.". The breach is said to have occurred last year on December 10, 2021, with the downloaded reports including customers' full names as well as their brokerage account numbers, and in some cases, brokerage portfolio value, brokerage portfolio holdings, and stock trading activity for one ...
KeePass Exploit Allows Attackers to Recover Master Passwords …
WEBMay 22, 2023 · A proof-of-concept (PoC) has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux, and macOS, and is expected to be patched in ...