The Hacker News34m
The High-Stakes Disconnect For ICS/OT Security
Only 31% of organizations have ICS/OT SOC capabilities. Protect critical infrastructure with tailored controls and SANS Five ...
The Hacker News6h
Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
Patch critical SimpleHelp vulnerabilities, including CVE-2024-57727 and CVE-2024-57728, to prevent admin credential theft and ...
The Hacker News5h
FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation
The U.S. Department of Justice (DoJ) on Tuesday disclosed that a court-authorized operation allowed the Federal Bureau of ...
The Hacker News7h
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces
Fortinet firewalls running firmware versions 7.0.14-7.0.16 targeted by attackers using zero-day vulnerabilities.
The Hacker News6h
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
All the three Microsoft Access issues, on the other hand, have been credited to Unpatched.ai, an AI-guided vulnerability ...
The Hacker News19h
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
The San Francisco-based company said the issue has the potential to put millions of American users' data at risk simply by ...
The Hacker News23h
Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
CVE-2024-50603 in Aviatrix Controller enables remote code execution, cryptomining, and backdoor attacks. Patch now.
The Hacker News1d
Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware
Sekoia said the HATVIBE attack sequence demonstrates targeting and technical overlaps with APT28-related Zebrocy campaigns, ...
The Hacker News1d
âš¡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]
This week in cybersecurity: zero-day exploits, advanced malware, and the latest hacking tricks you need to know about.
The Hacker News1d
Ransomware on ESXi: The Mechanization of Virtualized Attacks
In 2024, ransomware attacks targeting VMware ESXi servers reached alarming levels, with the average ransom demand ...
The Hacker News2d
WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables
Malicious JavaScript in WordPress checkout pages steals payment data, hides in wp_options, and exfiltrates encrypted details.
The Hacker News1d
Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems
Hijacked 4,000+ backdoors via expired domains for $20, exposing government, academic, and private systems globally.