The Hacker News3h
FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation
The U.S. Department of Justice (DoJ) on Tuesday disclosed that a court-authorized operation allowed the Federal Bureau of ...
The Hacker News3h
Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
Patch critical SimpleHelp vulnerabilities, including CVE-2024-57727 and CVE-2024-57728, to prevent admin credential theft and ...
The Hacker News4h
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
All the three Microsoft Access issues, on the other hand, have been credited to Unpatched.ai, an AI-guided vulnerability ...
The Hacker News4h
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces
Fortinet firewalls running firmware versions 7.0.14-7.0.16 targeted by attackers using zero-day vulnerabilities.
The Hacker News16h
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
The San Francisco-based company said the issue has the potential to put millions of American users' data at risk simply by ...
The Hacker News20h
Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
CVE-2024-50603 in Aviatrix Controller enables remote code execution, cryptomining, and backdoor attacks. Patch now.
The Hacker News23h
4 Reasons Your SaaS Attack Surface Can No Longer be Ignored
Surprises are never pleasant in the IT security world. Gaining visibility into your SaaS attack surface makes it possible to ...
The Hacker News23h
Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware
Sekoia said the HATVIBE attack sequence demonstrates targeting and technical overlaps with APT28-related Zebrocy campaigns, ...
The Hacker News1d
CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust ...
The Hacker News1d
Ransomware on ESXi: The Mechanization of Virtualized Attacks
In 2024, ransomware attacks targeting VMware ESXi servers reached alarming levels, with the average ransom demand ...
The Hacker News1d
Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems
Hijacked 4,000+ backdoors via expired domains for $20, exposing government, academic, and private systems globally.
The Hacker News1d
âš¡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]
This week in cybersecurity: zero-day exploits, advanced malware, and the latest hacking tricks you need to know about.