The Hacker News

2022-01-14 10:29:08 Cisco releases patch for a new critical vulnerability (CVE-2022-20658 / CVSS 9.6) affecting the Unified CCMP and Unified CCDM that could be weaponized to create rogue Administrator accounts by sending a crafted HTTP request.

Details: https://thehackernews.com/2022/01/cisco-releases-patch-for-critical-bug.html Open / Comment

2022-01-13 17:24:56 GootLoader malware campaign now targets employees of law and accounting firms, indicating the adversary is expanding its focus to other high-value targets.

Details: https://thehackernews.com/2022/01/gootloader-hackers-targeting-employees.html Open / Comment

2022-01-13 17:09:31 Researchers have decoded the mechanism by which the versatile Qakbot banking trojan handles the insertion of encrypted configuration data into the Windows Registry.

Read: https://thehackernews.com/2022/01/researchers-decrypted-qakbot-banking.html Open / Comment

2022-01-13 11:40:20 Iranian nation-state hackers exploiting the Log4j vulnerability to deploy a new PowerShell-based framework—dubbed "CharmPower"—designed to establish persistence, gather information, and execute commands.

Read details — https://thehackernews.com/2022/01/iranian-hackers-exploit-log4j.html Open / Comment

2022-01-13 08:00:07 Apple releases the latest iOS and iPadOS 15.2.1 updates to patch a vulnerability found in HomeKit that allows DoS attacks.

Details: https://thehackernews.com/2022/01/apple-releases-iphone-and-ipad-updates.html Open / Comment

2022-01-12 13:56:55 A new espionage malware called SysJoker has been discovered and is targeting users on Windows, macOS and Linux users.

Read details: https://thehackernews.com/2022/01/new-sysjoker-espionage-malware.html Open / Comment

2022-01-12 12:16:34 U.S. cybersecurity and intelligence agencies published a joint advisory on how to detect, respond to, and mitigate cyberattacks on critical infrastructure orchestrated by Russian state-backed actors.

Details: https://thehackernews.com/2022/01/fbi-nsa-and-cisa-warns-of-russian.html Open / Comment

2022-01-12 09:47:43 First Microsoft Patch Tuesday update of 2022 fixes 96 new vulnerabilities, including a critical "wormable" Windows RCE vulnerability (CVE-2022-21907) in the HTTP Protocol Stack.

Read details: https://thehackernews.com/2022/01/first-patch-tuesday-of-2022-brings-fix.html Open / Comment

2022-01-11 15:02:36 A new high-severity KCodes NetUSB #vulnerability affects millions of routers from various manufacturers.

Details: https://thehackernews.com/2022/01/new-kcodes-netusb-bug-affect-millions.html Open / Comment

2022-01-11 12:24:14 Moxie Marlinspike, founder of the popular encrypted instant messaging service Signal, has announced that he is stepping down as CEO and WhatsApp co-founder Brian Acton will serve as interim CEO.

Read details: https://thehackernews.com/2022/01/signal-ceo-resigns-whatsapp-co-founder.html Open / Comment