The Hacker News | #1 Trusted Cybersecurity News Site
Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning (ML) related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply chain security firm JFrog said in an analysis published last week.
New Ymir Ransomware Exploits Memory for Stealthy Attacks; …
1 day ago · The attack is notable for installing tools like Advanced IP Scanner and Process Hacker. Also utilized are two scripts that are part of the SystemBC malware, which allow for setting up a covert channel to a remote IP address for exfiltrating files that have a size greater than 40 KB and are created after a specified date.. The ransomware binary, for its part, uses …
THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7
Oct 14, 2024 · THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13) Hey there, it's your weekly dose of " what the heck is going on in cybersecurity land " – and trust me, you NEED to be in the loop this time. We've got everything from zero-day exploits and AI gone rogue to the FBI playing crypto kingpin – it's full of stuff they don't ...
The Hacker News — Cybersecurity Articles Posted on 14 July, 2021 ...
14 July, 2021 — Wednesday. REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks. REvil, the infamous ransomware cartel behind some of the biggest cyberattacks targeting JBS and Kaseya, has mysteriously disappeared from the dark web, leading to speculations that the criminal enterprise may have been taken down ...
Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited ...
Jan 17, 2024 · The development marks the first actively exploited zero-day to be patched by Google in Chrome in 2024. Last year, the tech giant resolved a total of 8 such actively exploited zero-days in the browser.. Users are recommended to upgrade to Chrome version 120.0.6099.224/225 for Windows, 120.0.6099.234 for macOS, and 120.0.6099.224 for Linux …
Google Patches Yet Another Actively Exploited Chrome Zero-Day …
May 16, 2024 · Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wild. Assigned the CVE identifier CVE-2024-4947, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Kaspersky researchers Vasily ...
New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak ...
May 8, 2024 · Spectre is the name given to a class of side-channel attacks that exploit branch prediction and speculative execution on modern CPUs to read privileged data in the memory in a manner that sidesteps isolation protections between applications. The latest attack approach targets a feature in the branch predictor called the Path History Register ...
How Phishing Attacks Adapt Quickly to Capitalize on Current Events
Aug 12, 2024 · Phishing attacks related to the 2024 Olympics in Paris also showcased threat actors' ability to execute more effective campaigns by tying them to current events. As one example of attacks in this category, Cyberint detected phishing emails claiming that recipients had won tickets to the Games and that, to collect the tickets, they needed to ...
CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network …
Jul 15, 2024 · A threat actor that was previously observed using an open-source network mapping tool has greatly expanded their operations to infect over 1,500 victims. Sysdig, which is tracking the cluster under the name CRYSTALRAY, said the activities have witnessed a tenfold surge, adding it includes "mass scanning, exploiting multiple vulnerabilities, and ...
Akira Ransomware Gang Extorts $42 Million; Now Targets Linux …
Apr 19, 2024 · Threat actors behind the Akira ransomware group have extorted approximately $42 million in illicit proceeds after breaching the networks of more than 250 victims as of January 1, 2024. "Since March 2023, Akira ransomware has impacted a wide range of businesses and critical infrastructure entities in North America, Europe, and Australia ...