The Hacker News

2022-01-24 10:13:30 A new Emotet malware campaign has been observed using "unconventional" IP address formats for the first time in a bid to sidestep detection by security solutions.

Read details: https://thehackernews.com/2022/01/emotet-now-using-unconventional-ip.html Open / Comment

2022-01-24 09:55:51 A new high-severity vulnerability (CVE-2022-21658) in Rust programming could allow an attacker to trick a privileged program into deleting files and directories that he or she could not otherwise access or delete.

Read: https://thehackernews.com/2022/01/high-severity-rust-programming-bug.html Open / Comment

2022-01-22 17:49:34 Latest analysis of the WhisperGate wiper malware, which attacked dozens of Ukrainian agencies earlier this month, has revealed "strategic similarities" with the NotPetya attack that hit the country in 2017.

Read: https://thehackernews.com/2022/01/experts-find-strategic-similarities-bw.html Open / Comment

2022-01-22 14:02:22 Cyberespionage group Molerats uses legitimate cloud services like Google Drive and Dropbox to host malware payloads, run C&C, and exfiltrate data from targets in the Middle East.

Read: https://thehackernews.com/2022/01/molerats-hackers-hiding-new-espionage.html Open / Comment

2022-01-22 10:20:09 Yet another supply-chain attack...

Hackers implanted a secret backdoor into nearly 40 themes and 53 plugins for WordPress websites developed by AccessPress.

Details: https://thehackernews.com/2022/01/hackers-planted-secret-backdoor-in.html Open / Comment

2022-01-22 07:46:41 Researchers disclose two critical vulnerabilities in Control Web Panel—previously known as CentOS Web—that could be exploited as part of an exploit chain to achieve pre-authenticated RCE on affected Linux servers.

https://thehackernews.com/2022/01/critical-bugs-in-control-web-panel.html Open / Comment

2022-01-21 14:42:05 Chinese APT41 hackers spotted using a previously undocumented "MoonBounce" firmware implant to maintain stealthy persistence during targeted cyber espionage campaigns.

Read details: https://thehackernews.com/2022/01/chinese-hackers-spotted-using-new-uefi.html Open / Comment

2022-01-21 12:41:29 U.S. has imposed sanctions on 4 current and former Ukrainian government officials for their involvement in a Russian-directed campaign to destabilize Ukraine.

Read details: https://thehackernews.com/2022/01/us-sanctions-4-ukrainians-for-working.html Open / Comment

2022-01-21 10:11:01 Cisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.

Details: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html Open / Comment

2022-01-20 13:25:36 An INTERPOL-led operation has led to the arrest of 11 members of a Nigerian cybercrime gang linked to Business Email Compromise (BEC) attacks targeting more than 50,000 victims in recent years.

Read: https://thehackernews.com/2022/01/interpol-busted-11-members-of-nigerian.html Open / Comment