The Hacker News13h
Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware
The malicious Excel document is designed to exploit a known remote code execution flaw in Office ( CVE-2017-0199, CVSS score: ...
The Hacker News4h
New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia
In an unusually specific campaign, users searching about the legality of Bengal Cats in Australia are being targeted with the GootLoader malware.
The Hacker News9h
HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities
The most severe among the six newly patched vulnerabilities are CVE-2024-42509 (CVSS score: 9.8) and CVE-2024-47460 (CVSS score: 9.0), two critical unauthenticated command injection flaws in the CLI ...
The Hacker News9h
Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation
Over 20 vulnerabilities found in ML open-source tools pose severe risks, including server hijacking and data breaches.
The Hacker News8h
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 04 - Nov 10)
Update and Patch Systems: Immediately apply the latest security updates to all edge devices and firewalls, particularly those ...
The Hacker News2d
Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering
The 36-year-old founder of the Bitcoin Fog cryptocurrency mixer has been sentenced to 12 years and six months in prison for ...
The Hacker News2d
Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns
The development comes a day after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a now-patched ...
The Hacker News3d
IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools
Pakistan's Transparent Tribe and China-linked IcePeony target India, leveraging advanced malware tools for cyber espionage.
The Hacker News4d
SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims
The findings come as Kaspersky shed light on a new "full-featured crimeware bundle" dubbed SteelFox that's propagated via ...
The Hacker News3d
CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw ...
The Hacker News3d
Malicious NPM Packages Target Roblox Users with Data-Stealing Malware
Roblox's popularity in recent years has led to threat actors actively pushing bogus packages to target both developers and ...
The Hacker News5d
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
The malware is engineered to connect to an adversary-controlled OneDrive account using hard-coded Entra ID (formerly Azure ...