The Hacker News | #1 Trusted Cybersecurity News Site
WEBThe shortcoming, credited to a researcher named " spacewasp ," was patched by Adobe in June 2024. Dutch security firm Sansec, which has described CosmicSting as the "worst bug to hit Magento and Adobe Commerce stores in two years," said the e-commerce sites are being compromised at the rate of three to five per hour.
data breach | News & Insights | The Hacker News
WEBBritish authorities on Thursday announced the arrest of a 17-year-old male in connection with a cyber attack affecting Transport for London (TfL). "The 17-year-old male was detained on suspicion of Computer Misuse Act offenses in relation to the attack, which was launched on TfL on 1 September," the U.K. National Crime Agency (NCA) said .
German Authorities Dismantle Dark Web Hub 'Kingdom Market' in …
WEBDec 21, 2023 — German law enforcement has announced the disruption of a dark web platform called Kingdom Market that specialized in the sales of narcotics and malware to "tens of thousands of users.". The exercise, which involved collaboration from authorities from the U.S., Switzerland, Moldova, and Ukraine, began on December 16, 2023, the Federal Criminal Police Office (BKA) said.
LuckyMouse Hackers Target Banks, Companies and Governments …
WEBApr 29, 2021 — The malicious activity, collectively named "EmissarySoldier," has been attributed to a threat actor called LuckyMouse, and is said to have happened in 2020 with the goal of obtaining geopolitical insights in the region. The attacks involved deploying a toolkit dubbed SysUpdate (aka Soldier) in a number of breached organizations, including ...
Vulnerability | News & Insights | The Hacker News
WEBThe vulnerability, tracked as CVE-2024-7490 , carries a CVSS score of 9.5 out of a maximum of 10.0. It has been described as a stack-based overflow vulnerability in ASF's implementation of the tinydhcp server stemming from a lack of adequate input validation. "There exists a vulnerability in all publicly available examples of the ASF codebase ...
Apache Warns of Zero-Day Exploit in the Wild - The Hacker News
WEBOct 5, 2021 — Apache users are highly recommended to patch as soon as possible to contain the path traversal vulnerability and mitigate any risk associated with active exploitation of the flaw.. Update: Path Traversal Zero-Day in Apache Leads to RCE Attacks The actively exploited Apache HTTP server zero-day flaw is far more critical than previously thought, with new proof-of-concept (PoC) exploits ...
The Hacker News Deals
WEBThe Essential 2024 MBA Bundle. $39.99 $209.00. The Hacker News Deals scours the web for the newest software, gadgets & web services. Explore our giveaways, bundles, Pay What You Want deals & more.
News & Insights - The Hacker News
WEBYes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and threat updates for Hackers, Security researchers, technologists, and nerds.
Hackers Hit Indian Defense, Energy Sectors with Malware Posing …
WEBMar 27, 2024 — Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called HackBrowserData and exfiltrate sensitive information in some cases by using Slack as command-and-control (C2). "The information stealer was delivered via a ...
Medusa Ransomware on the Rise: From Data Leaks to Multi …
WEBJan 12, 2024 — The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. "As part of their multi-extortion strategy, this group will provide victims with multiple options when their data is posted on their leak site ...