The Hacker News

2022-02-02 09:57:37 As many as 23 new high-severity vulnerabilities have been uncovered in various implementations of UEFI firmware from numerous vendors, including Bull Atos, Fujitsu, HP, Juniper Networks, Lenovo, and others.

Details: https://thehackernews.com/2022/02/dozens-of-security-flaws-discovered-in.html Open / Comment

2022-02-02 09:19:05 Iranian APT hackers "Moses Staff" deploying a new Trojan—StrifeWater—in their ransomware operations, which collects system files, executes commands, captures screenshots, creates persistence, and downloads updates and add-on modules.

Details: https://thehackernews.com/2022/02/hacker-group-moses-staff-using-new.html Open / Comment

2022-02-02 08:28:27 A critical arbitrary code execution vulnerability has been reported in the WordPress plugin for Elementor, which is used by over a million websites.

Read details: https://thehackernews.com/2022/02/critical-bug-found-in-wordpress-plugin.html Open / Comment

2022-02-01 16:38:53 Hackers behind Solarmarker information stealer and backdoor are now using novel registry tricks to establish long-term persistence on compromised systems.

Read details: https://thehackernews.com/2022/02/solarmarker-malware-uses-novel.html Open / Comment

2022-02-01 13:30:20 Iranian APT hackers have updated their malware arsenal with a new PowerShell-based implant—dubbed PowerLess Backdoor—that download additional payloads such as a keylogger and a data stealer.

Read: https://thehackernews.com/2022/02/iranian-hackers-using-new-powershell.html Open / Comment

2022-02-01 12:15:54 Ukraine continues to face cyber-espionage attacks from Russian hackers.

https://thehackernews.com/2022/02/ukraine-continues-to-face-cyber.html Open / Comment

2022-02-01 10:19:45 Researchers have uncovered details of a new malware campaign targeting private companies and government entities in Turkey with malicious PDFs, XLS files, and Windows executables.

Read details: https://thehackernews.com/2022/01/researchers-uncover-new-iranian-hacking.html Open / Comment

2022-02-01 07:18:21 A newly discovered vulnerability (CVE-2021-44142 / CVSS 9.9) affecting all versions of Samba could allow remote attackers to execute arbitrary code with root privileges on affected installations.

Details: https://thehackernews.com/2022/01/new-samba-bug-allows-remote-attackers.html Open / Comment

2022-01-31 18:43:52 Researchers have demonstrated a new type of fingerprinting technique — DrawnApart — that exploits a machine's graphics processing unit (GPU) as a means to track users across the Internet.

Read details: https://thehackernews.com/2022/01/your-graphics-card-fingerprint-can-be.html Open / Comment

2022-01-31 11:42:43 German court rules that websites embedding fonts from Google servers violate GDPR, and must pay €100 in damages for passing a user's personal data — i.e. IP address — to Google without consent.

Read details: https://thehackernews.com/2022/01/german-court-rules-websites-embedding.html Open / Comment