The Hacker News

Kinsing cryptojacking hacker group continuously expanding its exploitation arsenal, which now includes various flaws in Apache ActiveMQ, Log4j, NiFi, Atlassian Confluence, Citrix, Linux, Openfire, WebLogic Server, and SaltStack. Read: https://thehackernews.com/2024/05/kinsing-hacker-group-exploits-more.html

🔒 Attention cybersecurity professionals! A new report reveals that CVE-based vulnerabilities account for less than 1% of the average organization's on-prem exposure landscape. It's time to shift our focus to the real threats. Learn how: https://thehackernews.com/2024/05/new-xm-cyber-research-80-of-exposures.html

🚨 Alert: China-linked BlackTech group using advanced Deuterbear RAT in Asia-Pacific cyber espionage campaign. Learn more about the improved capabilities and infection pathway of this evolving threat: https://thehackernews.com/2024/05/china-linked-hackers-adopt-two-stage.html#hacking #cybersecurity

⚠️ North Korean APT group Kimsuky deploys Linux version of GoBear backdoor, targeting South Korean organizations. Learn more about the Gomir backdoor and its capabilities: https://thehackernews.com/2024/05/kimsuky-apt-deploying-linux-backdoor.html

🚨 Attention D-Link users - CISA warns of actively exploited vulnerabilities, CVE-2014-100005 and CVE-2021-40655, that attackers could exploit to change your router settings or steal your credentials. Learn more: https://thehackernews.com/2024/05/cisa-warns-of-actively-exploited-d-link.html

🚨 New Wi-Fi #vulnerability discovered! CVE-2023-52424, dubbed "SSID Confusion attack," affects all operating systems & Wi-Fi clients. Learn how attackers can trick you into connecting to a less secure network & eavesdrop on your traffic. https://thehackernews.com/2024/05/new-wi-fi-vulnerability-enabling.html

At Georgetown, gain the tactical skills to plan for and respond to information security threats. Attend this June 7 webinar. Save your seat: https://thn.news/georgetown-cybersec-webinar-li

⚠️ North Korea-linked Kimsuky hacking group has launched a new social engineering attack using fake Facebook accounts to target individuals via Messenger. Learn more: https://thehackernews.com/2024/05/north-korean-hackers-exploit-facebook.html

Every SaaS account created by your employees represents a new “identity” with unique permissions, security settings & risks and many app owners sit outside of IT, meaning security controls could be overlooked. Learn how Nudge Security can help: https://thn.news/saas-identity-governance

Nearly a dozen security flaws have been discovered in the GE HealthCare Vivid Ultrasound product family. These vulnerabilities could allow ransomware attacks or data tampering. Learn more: https://thehackernews.com/2024/05/researchers-uncover-11-security-flaws.html