Hacking Archives - Page 3 of 8

Hackers bombard PyPi platform with information-stealing malware

The malware dropped in this campaign is a clone of the open-source W4SP Stealer, responsible for a previous widespread malware infection on PyPI in November 2022

20 December

Microsoft-signed malicious Windows drivers used in ransomware attacks

12/16/2022
Cyber News
Exploit, Hacking, Patching, Ransomware, SupplyChain

Microsoft has revoked several Microsoft hardware developer accounts after drivers signed through their profiles were used in cyberattacks, including ransomware incidents

16 December

Microsoft December 2022 Patch Tuesday fixes 2 zero-days, 49 flaws

Six of the 49 vulnerabilities fixed with this update are classified as 'Critical' as they allow remote code execution, one of the most severe vulnerabilities

14 December

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

Apple rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browsers to address a new zero-day vulnerability that results in remote code execution

14 December

New Python malware backdoors VMware ESXi servers for remote access

12/14/2022
Cyber News
Exploit, Hacking, Hardening, Patching, PrivEsc

A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system

14 December

Hackers exploit critical Citrix ADC and Gateway zero-day

12/14/2022
Cyber News
0day, Exploit, Hacking, Patching, Security

This new vulnerability allows an unauthenticated attacker to execute commands remotely on vulnerable devices and take control of them

14 December

Google Chrome Flaw Added to CISA Patch List

Google has already released a fixed version of Chrome browser for Windows, Mac, and Linux users. CISA has given government agencies until Dec. 26 to get a patch

10 December

Experts created a technique to bypass web application firewalls (WAF) of several major vendors

Researchers have verified that the bypass attack technique has worked against firewalls from multiple vendors, including Cloudflare, F5, Imperva, and Palo Alto Networks

9 December

Cisco discloses high-severity IP phone bug with exploit code

Cisco has disclosed today a high-severity vulnerability affecting the latest generation of its IP phones and exposing them to remote code execution and denial of service (DoS) attacks

8 December