Russian-Speaking Attackers Target Ethereum Devs with Fake Hardhat npm Packages Cybersecurity researchers have revealed several malicious packages on the npm registry that have b... 2025-1-6 09:28:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com hardhat malicious attacker security

Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution Vulnerability / Software SecurityA high-severity security flaw has been disclosed in ProjectDiscov... 2025-1-4 14:29:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com nuclei security malicious digest attackers

PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps Cybersecurity researchers have flagged a new malware called PLAYFULGHOST that comes with a wide ran... 2025-1-4 07:52:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com windows remote letsvpn malicious

U.S. Treasury Sanctions Beijing Cybersecurity Firm for State-Backed Hacking Campaigns Cyber Espionage / IoT BotnetThe U.S. Treasury Department's Office of Foreign Assets Control (OFAC)... 2025-1-4 07:30:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com security typhoon treasury flax prc

New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60% Machine Learning / VulnerabilityCybersecurity researchers have shed light on a new jailbreak techn... 2025-1-3 11:14:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com llm likert prompts judge chatgpt

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers Windows Server / Threat MitigationA proof-of-concept (PoC) exploit has been released for a now-pat... 2025-1-3 08:16:0 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com attacker windows microsoft security victim

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption DevOps / Software DevelopmentMicrosoft has announced that it's making an "unexpected change" to th... 2025-1-3 06:49:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com azureedge edgio microsoft door migration

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations Technology / Data PrivacyApple has agreed to pay $95 million to settle a proposed class action law... 2025-1-3 05:43:0 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com siri claims lawsuit parties

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API Vulnerability / Data ProtectionDetails have emerged about three now-patched security vulnerabiliti... 2025-1-2 12:53:0 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com security orderby stratus startswith fetchxml

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them Cloud Security / Threat IntelligenceIn the past year, cross-domain attacks have gained prominence... 2025-1-2 10:53:0 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com security crowdstrike cloud falcon gaps

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT Cybersecurity researchers have discovered a malicious package on the npm package registry that masq... 2025-1-2 07:45:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com github stars remote malicious quasar

Three Russian-German Nationals Charged with Espionage for Russian Secret Service Cyber Espionage / HackingGerman prosecutors have charged three Russian-German nationals for acting... 2025-1-2 07:25:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com dieter military armed charges

New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites Web Security / VulnerabilityThreat hunters have disclosed a new "widespread timing-based vulnerabi... 2025-1-1 13:24:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com yibelo attacker victim

Iranian and Russian Entities Sanctioned for Election Interference Using AI and Cyber Tactics Generative AI / Election InterferenceThe U.S. Treasury Department's Office of Foreign Assets Cont... 2025-1-1 09:59:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com gru influence iran treasury cge

New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy The U.S. Department of Justice (DoJ) has issued a final rule carrying out Executive Order (EO) 1411... 2024-12-31 11:26:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com concern doj security americans bulk

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents Vulnerability / Incident ResponseThe United States Treasury Department said it suffered a "major c... 2024-12-31 05:42:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com beyondtrust treasury remote security

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation Vulnerability / Cloud SecurityCybersecurity researchers have uncovered three security weaknesses i... 2024-12-31 04:35:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com airflow security attacker geneva kubernetes

New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits Cybersecurity / ComplianceThe United States Department of Health and Human Services' (HHS) Office... 2024-12-30 12:43:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com healthcare ransomware electronic hospitals

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips Cybersecurity / Hacking NewsEvery week, the digital world faces new challenges and changes. Hacker... 2024-12-30 12:15:0 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com security software malicious threats

When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions Browser Security / GenAI SecurityNews has been making headlines over the weekend of the extensive... 2024-12-30 10:40:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com exposure malicious security posed