May 4, 2023

Travel on the Cyber Express

Cyber Security

The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com

China-Linked 'Muddling Meerkat' Hijacks DNS to Map Internet on Global Scale
by info@thehackernews.com (The Hacker News) on 29 April 2024 at 13:46
A previously undocumented cyber threat dubbed Muddling Meerkat has been observed undertaking sophisticated domain name system (DNS) activities in a likely effort to evade security measures and conduct reconnaissance of networks across the world since October 2019. Cloud security firm Infoblox described the threat actor as likely affiliated with the
Navigating the Threat Landscape: Understanding Exposure Management, Pentesting, Red Teaming and RBVM
by info@thehackernews.com (The Hacker News) on 29 April 2024 at 10:54
It comes as no surprise that today's cyber threats are orders of magnitude more complex than those of the past. And the ever-evolving tactics that attackers use demand the adoption of better, more holistic and consolidated ways to meet this non-stop challenge. Security teams constantly look for ways to reduce risk while improving security posture, but many
New R Programming Vulnerability Exposes Projects to Supply Chain Attacks
by info@thehackernews.com (The Hacker News) on 29 April 2024 at 10:50
A security vulnerability has been discovered in the R programming language that could be exploited by a threat actor to create a malicious RDS (R Data Serialization) file such that it results in code execution when loaded and referenced. The flaw, assigned the CVE identifier CVE-2024-27322, "involves the use of promise objects and lazy evaluation in R," AI application security
Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover
by info@thehackernews.com (The Hacker News) on 29 April 2024 at 09:58
Multiple critical security flaws have been disclosed in the Judge0 open-source online code execution system that could be exploited to obtain code execution on the target system. The three flaws, all critical in nature, allow an "adversary with sufficient access to perform a sandbox escape and obtain root permissions on the host machine," Australian
Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks
by info@thehackernews.com (The Hacker News) on 28 April 2024 at 13:52
Identity and access management (IAM) services provider Okta has warned of a spike in the "frequency and scale" of credential stuffing attacks aimed at online services. These unprecedented attacks, observed over the last month, are said to be facilitated by "the broad availability of residential proxy services, lists of previously stolen credentials ('combo lists'), and scripting tools," the

Tweets by TheHackersNews