Technology

The RIG exploit kit (EK) touched an all-time high successful exploitation rate of nearly 30% in 2022, new findings reveal. “RIG EK is a financially-motivated program that has been active since 2014,” Swiss cybersecurity company PRODAFT said in an exhaustive report shared with The Hacker News. “Although it has yet to substantially change its exploits
0 Comments
Samsung Galaxy A14 4G has been launched in Malaysia and is reportedly available for purchase at offline stores. The newly launched handset features a 6.6-inch PLS LCD display with a resolution of 1,080 x 2,408 pixels. It is powered by an unspecified octa-core processor. The Samsung Galaxy A14 4G had previously been spotted on several
0 Comments
Feb 27, 2023Ravie LakshmananBrowser Security / Malware A new ChromeLoader malware campaign has been observed being distributed via virtual hard disk (VHD) files, marking a deviation from the ISO optical disc image format. “These VHD files are being distributed with filenames that make them appear like either hacks or cracks for Nintendo and Steam games,”
0 Comments
Feb 23, 2023Ravie Lakshmanan Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, 2023. Tracked as CVE-2022-47966 (CVSS score: 9.8), the remote code execution flaw allows a complete takeover of the susceptible systems by unauthenticated attackers. As many as 24 different products, including
0 Comments
Feb 24, 2023Ravie LakshmananCyber War / Cybersecurity The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations and individuals to increase their cyber vigilance, as Russia’s military invasion of Ukraine officially enters one year. “CISA assesses that the United States and European nations may experience disruptive and defacement attacks against websites in an attempt
0 Comments
Samsung Galaxy A34 5G, the purported handset from Galaxy A-series, has reportedly been spotted on Google Play Console. Its latest appearance on the Google Play Console has given an insight into expected features and specifications. The upcoming addition to the company’s Galaxy A-series is speculated to be powered by a MediaTek Dimensity 1080 SoC. The
0 Comments
Feb 24, 2023The Hacker NewsCybersecurity Webinar / SaaS Security Are you prepared to tackle the top SaaS challenges of 2023? With high-profile data breaches affecting major companies like Nissan and Slack, it’s clear that SaaS apps are a prime target for cyberattacks. The vast amounts of valuable information stored in these apps make them a
0 Comments
Feb 24, 2023Ravie LakshmananMobile Security / Firmware Google said it’s working with ecosystem partners to harden the security of firmware that interacts with Android. While the Android operating system runs on what’s called the application processor (AP), it’s just one of the many processors of a system-on-chip (SoC) that cater to various tasks like cellular
0 Comments
Xiaomi Civi 2 was launched in September last year featuring a Qualcomm Snapdragon 7 Gen 1 SoC, and a 50-megapixel Sony IMX766 main sensor. Civi-branded smartphones from Xiaomi have been headlined by their camera and image quality, with a special focus on front-facing cameras for vlogging. The Chinese smartphone manufacturer is now being tipped to
0 Comments
Feb 24, 2023Ravie LakshmananPrivacy / Data Safety An investigation into data safety labels for Android apps available on the Google Play Store has uncovered “serious loopholes” that allow apps to provide misleading or outright false information. The study, conducted by the Mozilla Foundation as part of its *Privacy Not Included initiative, compared the privacy policies
0 Comments
Feb 23, 2023Ravie LakshmananEndpoint Security / Cryptocurrency Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems. Jamf Threat Labs, which made the discovery, said the XMRig coin miner was executed as Final Cut Pro, a video editing software from Apple, which contained an unauthorized modification. “This malware
0 Comments
Feb 23, 2023Ravie LakshmananSoftware Security / Supply Chain Attack Cybersecurity researchers are warning of “imposter packages” mimicking popular libraries available on the Python Package Index (PyPI) repository. The 41 malicious PyPI packages have been found to pose as typosquatted variants of legitimate modules such as HTTP, AIOHTTP, requests, urllib, and urllib3. The names of the
0 Comments