The Hacker News18m
Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack
A spear-phishing campaign in Brazil uses fake tax files to deliver Astaroth malware, impacting key industries.
The Hacker News2h
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access
Update GitHub Enterprise Server to patch critical SSO bypass vulnerability (CVE-2024-9487). Protect against unauthorized access.
The Hacker News3h
CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) software to its Known Exploited Vulnerabilities ( ...
The Hacker News15h
TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns
First spotted in the wild in 2019, TrickMo is so named for its associations with the TrickBot cybercrime group and is capable ...
The Hacker News16h
New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT
PureCrypter delivers DarkVision RAT, a versatile malware offering keylogging, remote access, and password theft.
The Hacker News16h
New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists
North Korean hackers deploy Linux-based FASTCash malware to exploit ATMs globally, enabling fraudulent withdrawals.
The Hacker News20h
The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short
Protect against zero-day attacks with NDR's proactive AI-driven detection. Learn how traditional solutions fall short ...
The Hacker News23h
China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns
Volt Typhoon is the moniker assigned to a China-nexus cyber espionage group that's believed to be active since 2019, ...
The Hacker News1d
Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates
Cyber researchers warn of new malware campaign using Hijack Loader and XWorm, evading detection with code-signed certificates ...
The Hacker News1d
WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites
Jetpack, owned by WordPress maker Automattic, is an all-in-one plugin that offers a comprehensive suite of tools to improve ...
The Hacker News1d
Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open-Source Ecosystems
Cybersecurity experts uncover entry-point vulnerabilities in popular developer tools, enabling stealthy supply chain attacks ...
The Hacker News1d
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration
Nation-state hackers exploit Ivanti Cloud Appliance zero-day vulnerabilities for unauthorized access, credential theft, and ...