समस्या रैपिड7 के कर्मचारियों की ओर से “2024 हमला खुफिया रिपोर्ट” [1] यह एक अच्छी तरह से शोध की गई, अच्छी तरह से लिखी गई रिपोर्ट है जो सावधानीपूर्वक अध्ययन के योग्य है। कुछ मुख्य बातें ये हैं: 2023 में और 2024 की शुरुआत में व्यापक रूप से शोषण की गई 30 से अधिक नई कमजोरियों में से 53% शून्य-दिन थीं। एन-डे कमजोरियों की तुलना में शून्य-दिन की कमजोरियों से अधिक सामूहिक समझौता घटनाएँ हुईं।
Source: TheHackerNews
जुलाई 08, 2024न्यूज़रूमगोपनीयता / इंटरनेट सेंसरशिप रूसी समाचार मीडिया की रिपोर्ट के अनुसार, रूस के राज्य संचार नियामक रोसकोम्नाडज़ोर के अनुरोध पर, एप्पल ने 4 जुलाई 2024 को अपने ऐप स्टोर से रूस में कई वर्चुअल प्राइवेट नेटवर्क (वीपीएन) ऐप्स को हटा दिया। इसमें प्रोटॉन वीपीएन, रेड शील्ड वीपीएन, नॉर्डवीपीएन और ले वीपीएन सहित 25…
Jul 17, 2024The Hacker NewsInsider Threats / Cybersecurity Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to succeed. For example, in 2022, the FBI issued a warning1 that SIM swap attacks are growing: gain…
Aug 07, 2024Ravie LakshmananEmail Security / Vulnerability Cybersecurity researchers have disclosed details of security flaws in the Roundcube webmail software that could be exploited to execute malicious JavaScript in a victim’s web browser and steal sensitive information from their account under specific circumstances. “When a victim views a malicious email in Roundcube sent by an…
Sep 19, 2024Ravie LakshmananCyber Attack / Hacking Threat actors have been observed targeting the construction sector by infiltrating the FOUNDATION Accounting Software, according to new findings from Huntress. “Attackers have been observed brute-forcing the software at scale, and gaining access simply by using the product’s default credentials,” the cybersecurity company said. Targets of the emerging…
Jul 23, 2024NewsroomCyber Espionage / Chinese Hackers Organizations in Taiwan and a U.S. non-governmental organization (NGO) based in China have been targeted by a Beijing-affiliated state-sponsored hacking group called Daggerfly using an upgraded set of malware tools. The campaign is a sign that the group “also engages in internal espionage,” Symantec’s Threat Hunter Team, part…
Sep 06, 2024Ravie LakshmananSoftware Security / Hacking Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software and packages. These attacks typically involve registering domains or packages with names slightly altered from their legitimate counterparts (e.g., goog1e.com vs. google.com). Adversaries targeting open-source repositories across…