The Mystery of Hezbollah’s Deadly Exploding Pagers

At least eight people have been killed and more than 2,700 people have been injured in Lebanon by exploding pagers. Experts say the blasts point toward a supply chain compromise, not a cyberattack.

Security Latest – ​Read More

80% of Critical National Infrastructure Companies Experienced an Email Security Breach in Last Year

The scale of the potential disruption from a successful attack on CNI is all too tempting for cyber attackers.

Security | TechRepublic – ​Read More

VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest

VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.

The post VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest appeared first on SecurityWeek.

SecurityWeek – ​Read More

US Hits Intellexa Spyware Maker With More Sanctions

The US has imposed further sanctions on Intellexa, the maker of the Predator spyware, targeting individuals and entities associated with the company due to its opaque corporate structure designed to evade accountability.

Cyware News – Latest Cyber News – ​Read More

Intezer Raises $33M to Extend AI-Powered SOC Platform

Intezer is looking to tap into booming market for AI-powered tooling to address the severe shortage of skilled cybersecurity professionals. 

The post Intezer Raises $33M to Extend AI-Powered SOC Platform appeared first on SecurityWeek.

SecurityWeek – ​Read More

EchoStrike: Generate Undetectable Reverse Shells, Perform Process Injection

EchoStrike features an interactive Python wizard for easy customization, various persistence techniques, binary padding for evasion, AES payload encryption, and dynamic binary download.

Cyware News – Latest Cyber News – ​Read More

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

North Korean hackers are using RustDoor malware to target cryptocurrency users on LinkedIn, posing as recruiters for legitimate decentralized finance (DeFi) companies like STON.fi.

Cyware News – Latest Cyber News – ​Read More

Update: PoC Exploit Released for Windows Hyper-V Zero-Day Vulnerability

This critical flaw, actively exploited in the wild, allows attackers to elevate privileges to SYSTEM level, posing a significant risk to organizations using Microsoft’s Hyper-V virtualization technology.

Cyware News – Latest Cyber News – ​Read More

Supply Chain Attack on Google Cloud Composer Could Have Resulted in Remote Code Execution

Google has addressed a critical security flaw in Google Cloud Platform (GCP) Composer that could have allowed remote code execution via a supply chain attack known as dependency confusion.

Cyware News – Latest Cyber News – ​Read More