News aggregator

Kazakhstan Begins Intercepting HTTPS Internet Traffic Of All Citizens Forcefully

THN - 11 hours 45 min ago
If you are in Kazakhstan and unable to access the Internet service without installing a certificate, you're not alone. The Kazakhstan government has once again issued an advisory to all major local Internet Service Providers (ISPs) asking them to make it mandatory for all their customers to install government-issued root certificates on their devices in order to regain access to the Internet

Slack Resets Passwords For Users Who Hadn't Changed It Since 2015 Breach

THN - Thu, 18/07/2019 - 14:04
If you use Slack, a popular cloud-based team collaboration server, and recently received an email from the company about a security incident, don't panic and read this article before taking any action. Slack has been sending a "password reset" notification email to all those users who had not yet changed passwords for their Slack accounts since 2015 when the company suffered a massive data

Breach at Bulgaria's Tax Agency Exposed Data of Over 70% Citizens

THN - Wed, 17/07/2019 - 14:50
Eastern European country Bulgaria has suffered the biggest data breach in its history that compromised personal and financial information of 5 million adult citizens out of its total population of 7 million people. According to multiple sources in local Bulgarian media, an unknown hacker earlier this week emailed them download links to 11GB of stolen data which included taxpayer's personal

EvilGnome: A New Backdoor Implant Spies On Linux Desktop Users

THN - Wed, 17/07/2019 - 11:32
Security researchers have discovered a rare piece of Linux spyware that's currently fully undetected across all major antivirus security software products, and includes rarely seen functionalities with regards to most Linux malware, The Hacker News learned. It's a known fact that there are a very few strains of Linux malware exist in the wild as compared to Windows viruses because of its core

New Attack Lets Android Apps Capture Loudspeaker Data Without Any Permission

THN - Wed, 17/07/2019 - 07:52
Earlier this month, The Hacker News covered a story on research revealing how over 1300 Android apps are collecting sensitive data even when users have explicitly denied the required permissions. The research was primarily focused on how app developers abuse multiple ways around to collect location data, phone identifiers, and MAC addresses of their users by exploiting both covert and side

Engage Your Management with the Definitive 'Security for Management' Presentation Template

THN - Tue, 16/07/2019 - 09:25
In every organization, there is a person who's directly accountable for cybersecurity. The name of the role varies per the organization's size and maturity – CISO, CIO, and Director of IT are just a few common examples – but the responsibility is similar in all places. They're the person who understands the risk and exposure, knows how prepared the team and most important – what the gaps are

Hackers Can Manipulate Media Files You Receive Via WhatsApp and Telegram

THN - Tue, 16/07/2019 - 06:31
If you think that the media files you receive on your end-to-end encrypted secure messaging apps can not be tampered with, you need to think again. Security researchers at Symantec yesterday demonstrated multiple interesting attack scenarios against WhatsApp and Telegram Android apps, which could allow malicious actors to spread fake news or scam users into sending payments to wrong accounts.

Zoom RCE Flaw Also Affects Its Rebranded Versions RingCentral and Zhumu

THN - Tue, 16/07/2019 - 04:03
The same security vulnerabilities that were recently reported in Zoom for macOS also affect two other popular video conferencing software that under the hood, are just a rebranded version of Zoom video conferencing software. Security researchers confirmed The Hacker News that RingCentral, used by over 350,000 businesses, and Zhumu, a Chinese version of Zoom, also runs a hidden local web

iOS URL Scheme Could Let App-in-the-Middle Attackers Hijack Your Accounts

THN - Mon, 15/07/2019 - 14:44
Security researchers have illustrated a new app-in-the-middle attack that could allow a malicious app installed on your iOS device to steal sensitive information from other apps by exploiting certain implementations of Custom URL Scheme. By default on Apple's iOS operating system, every app runs inside a sandbox of its own, which prevent all apps installed on the same device from accessing

This Flaw Could Have Allowed Hackers to Hack Any Instagram Account Within 10 Minutes

THN - Mon, 15/07/2019 - 05:50
Watch out! Facebook-owned photo-sharing service has recently patched a critical vulnerability that could have allowed hackers to compromise any Instagram account without requiring any interaction from the targeted users. Instagram is growing quickly—and with the most popular social media network in the world after Facebook, the photo-sharing network absolutely dominates when it comes to user

Zoom Video Conferencing for macOS Also Vulnerable to Critical RCE Flaw

THN - Sat, 13/07/2019 - 08:20
The chaos and panic that the disclosure of privacy vulnerability in the highly popular and widely-used Zoom video conferencing software created earlier this week is not over yet. As suspected, it turns out that the core issue—a locally installed web server by the software—was not just allowing any website to turn on your device webcam, but also could allow hackers to take complete control

Facebook to Pay $5 Billion Fine to Settle FTC Privacy Investigation

THN - Sat, 13/07/2019 - 04:27
After months of negotiations, the United States Federal Trade Commission (FTC) has approved a record $5 billion settlement with Facebook over its privacy investigation into the Cambridge Analytica scandal. The settlement will put an end to a wide-ranging probe that began more than a year ago and centers around the violation of a 2011 agreement Facebook made with the FTC that required Facebook

Cybersecurity Frameworks — Types, Strategies, Implementation and Benefits

THN - Fri, 12/07/2019 - 05:09
Organizations around the world are wondering how to become immune from cyber attacks which are evolving every day with more sophisticated attack vectors. IT teams are always on the lookout for new ransomware and exploit spreading in the wild, but can all these unforeseen cyber attacks be prevented proactively? That's definitely a 'NO,' which is why there's a reactive approach in place to

New Malware Replaced Legit Android Apps With Fake Ones On 25 Million Devices

THN - Thu, 11/07/2019 - 10:04
Are you sure the WhatsApp app you are using on your Android device is legitimate, even if it's working perfectly as intended? ...Or the JioTV, AppLock, HotStar, Flipkart, Opera Mini or Truecaller app—if you have installed any of these? I'm asking this because cybersecurity researchers just yesterday revealed eye-opening details about a widespread Android malware campaign wherein attackers

Magecart Hackers Infect 17,000 Sites Through Misconfigured Amazon S3 Buckets

THN - Thu, 11/07/2019 - 04:34
Magecart strikes again! Cybersecurity researchers have identified yet another supply-chain attack carried out by payment card hackers against more than 17,000 web domains, which also include websites in the top 2,000 of Alexa rankings. Since Magecart is neither a single group nor a specific malware instead an umbrella term given to all those cyber criminal groups and individuals who inject

eCh0raix — New Ransomware Targets QNAP NAS Devices

THN - Wed, 10/07/2019 - 11:00
A new ransomware family has been found targeting Network Attached Storage (NAS) devices made by Taiwan-based QNAP Systems and holding users' data hostage until a ransom is paid, researchers told The Hacker News. Ideal for home and small business, NAS devices are dedicated file storage units connected to a network or through the Internet, which allow users to store and share their data and

Powerful FinSpy Spyware Found Targeting iOS and Android Users in Myanmar

THN - Wed, 10/07/2019 - 09:29
One of the most powerful, infamous, and advanced piece of government-grade commercial surveillance spyware dubbed FinSpy—also known as FinFisher—has been discovered in the wild targeting users in Myanmar. Created by German company Gamma International, FinSpy is spying software that can target various mobile platforms including iOS and Android, we well as desktop operating systems. Gamma

Hackers' Operating System Kali Linux Released for Raspberry Pi 4

THN - Wed, 10/07/2019 - 04:41
We've got some really exciting news for you... Offensive Security has released an official version of Kali Linux for Raspberry Pi 4—the most powerful version of the compact computer board yet that was released just two weeks ago with the full 4GB of RAM at low cost and easy accessibility. Based on Debian, Kali Linux has always been the number one operating system for ethical hackers and

Marriott Faces $123 Million GDPR Fine Over Starwood Data Breach

THN - Tue, 09/07/2019 - 16:54
After fining British Airways with a record fine of £183 million earlier this week, the UK's data privacy regulator is now planning to slap world's biggest hotel chain Marriott International with a £99 million ($123 million) fine under GDPR over 2014 data breach. This is the second major penalty notice in the last two days that hit companies for failing to protect its customers' personal and

Patch Tuesday: Microsoft Releases July 2019 Security Updates

THN - Tue, 09/07/2019 - 15:00
Microsoft today released its monthly batch of software security updates for the July month to patch a total of 77 vulnerabilities, 14 are rated Critical, 62 are Important, and 1 is rated Moderate in severity. The July 2019 security updates include patches for various supported versions of Windows operating systems and other Microsoft products, including Internet Explorer, Edge, Office, Azure


Subscribe to Shiga Tecnologia aggregator