Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The Hacker News Daily Updates Solutions Demo: CyberArk Workforce Password Management Attackers used to focus mainly on privileged users’ credentials. But now they’ll target anyone in your organization with access to resources they want -- including everyday employees and their passwords for business applications. Download Now Sponsored LATEST NEWS Mar 8, 2023 Syxsense Platform: Unified Security and Endpoint Management As threats grow and attack surfaces get more complex, companies continue to struggle with the multitude of tools they utilize to handle endpoint security and management. This can leave gaps in an enterprise's ability to identify devices that are accessing the network and in ensuring that those devices are compliant with security policies. These gaps are often seen in outdated spreadsheets ... Read More Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's widely used by public institutions and universities, the re-infiltration in October 2022 involved ... Read More Q4 Threat Report - The Latest Malware, Zero Days and Vulnerabilities See the latest trends in malware, zero days and vulnerabilities across Windows, Linux and macOS platforms. Shift up your security with actionable threat intelligence found only in the Uptycs Threat Research ... Read More Sharp Panda Using New Soul Framework Version to Target Southeast Asian Governments High-profile government entities in Southeast Asia are the target of a cyber espionage campaign undertaken by a Chinese threat actor known as Sharp Panda since late last year. The intrusions are characterized by the use of a new version of the Soul modular framework, marking a departure from the group's attack chains observed in 2021. Israeli cybersecurity company Check Point said the ... Read More CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is below - CVE-2022-35914 (CVSS score: 9.8) - Teclib GLPI Remote Code Execution Vulnerability CVE-2022-33891 (CVSS score: 8.8) - Apache Spark Command Injection ... Read More SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies, and other sectors. "The threat actors behind the campaign are targeting Facebook business accounts by using Google ads and fake Facebook profiles that promote things like games, adult content, and cracked software, etc. to ... Read More Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps A suspected Pakistan-aligned advanced persistent threat (APT) group known as Transparent Tribe has been linked to an ongoing cyber espionage campaign targeting Indian and Pakistani Android users with a backdoor called CapraRAT. "Transparent Tribe distributed the Android CapraRAT backdoor via trojanized secure messaging and calling apps branded as MeetsApp and MeetUp," ESET said in a ... Read More Why Healthcare Can't Afford to Ignore Digital Identity Investing in digital identity can improve security, increase clinical productivity, and boost healthcare's bottom line. — by Gus Malezis, CEO of Imprivata Digitalization has created immeasurable opportunities for businesses over the past two decades. But the growth of hybrid work and expansion of Internet of Things (IoT) has outpaced traditional 'castle and moat' cybersecurity, ... Read More Making the Regulatory Case for Software Bill of Materials (SBOM) to Enhance Product Security An enterprise’s need to engage suitable cybersecurity solutions to enhance product security is generally recognized as having shifted from a discretionary decision to a requirement. Download Now Sponsored This email was sent to myemailku.ghdbrevo2018@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please click here. Contact The Hacker News: info@thehackernews.com Unsubscribe The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India