Spanish IT Firm Caught Exploiting Chrome, Firefox, & Windows Zero-Day Vulnerabilities

The Hacker News Daily Updates How to Use a Hacker's Toolkit Against Them How can you stay one step ahead of hackers targeting your employees to keep your organization safe? Download Now Sponsored LATEST NEWS Dec 2, 2022 Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities The threat actors behind Cuba (aka COLDDRAW) ransomware have received more than $60 million in ransom payments and compromised over 100 entities across the world as of August 2022. In a new advisory shared by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau ... Read More Google Accuses Spanish Spyware Vendor of Exploiting Chrome, Firefox, & Windows Zero-Days A Barcelona-based surveillanceware vendor named Variston IT is said to have surreptitiously planted spyware on targeted devices by exploiting several zero-day flaws in Google Chrome, Mozilla Firefox, and Windows, some of which date back to December 2018. "Their Heliconia framework exploits n-day ... Read More Hackers Leak Another Set of Medibank Customer Data on the Dark Web Medibank on Thursday confirmed that the threat actors behind the devastating cyber attack have posted another dump of data stolen from its systems on the dark web after its refusal to pay a ransom. "We are in the process of analyzing the data, but the data released appears to be the data we ... Read More Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java Framework A critical security vulnerability has been disclosed in the Quarkus Java framework that could be potentially exploited to achieve remote code execution on affected systems. Tracked as CVE-2022-4116 (CVSS score: 9.8), the shortcoming could be trivially abused by a malicious actor without any ... Read More What Developers Need to Fight the Battle Against Common Vulnerabilities Today's threat landscape is constantly evolving, and now more than ever, organizations and businesses in every sector have a critical need to consistently produce and maintain secure software. While some verticals - like the finance industry, for example - have been subject to regulatory and ... Read More Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users More than 300,000 users across 71 countries have been victimized by a new Android threat campaign called the Schoolyard Bully Trojan. Mainly designed to steal Facebook credentials, the malware is camouflaged as legitimate education-themed applications to lure unsuspecting users into downloading ... Read More Researchers 'Accidentally' Crash KmsdBot Cryptocurrency Mining Botnet Network An ongoing analysis into an up-and-coming cryptocurrency mining botnet known as KmsdBot has led to it being accidentally taken down. KmsdBot, as christened by the Akamai Security Intelligence Response Team (SIRT), came to light mid-November 2022 for its ability to brute-force systems with weak SSH ... Read More LastPass Suffers Another Security Breach; Exposed Some Customers Information Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer information. "We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its ... Read More How to Use a Hacker's Toolkit Against Them How can you stay one step ahead of hackers targeting your employees to keep your organization safe? Download Now Sponsored This email was sent to myemailku.ghdbrevo2018@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please click here. Contact The Hacker News: info@thehackernews.com Unsubscribe The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India