The Hacker News’s Tweets

Cybersecurity experts warn of "Black Basta" #ransomware that attacked dozens of companies in the U.S., Canada, U.K., Australia, and New Zealand within 2 months of its emergence, making it a prominent threat in a short period of time. Read: thehackernews.com/2022/06/cybers #infosec

Cybersecurity Experts Warn of Emerging Threat of "Black Basta" Ransomware

Cybersecurity experts are warning about the "Black Basta" ransomware gang, which has attacked dozens of companies worldwide.

2

60

82

A remote memory-corruption #vulnerability has been discovered in the latest version of #OpenSSL library that can be exploited very easily by an attacker. Read: thehackernews.com/2022/06/openss "If RCE exploitation is possible, this makes it worse than Heartbleed..."

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

A remote memory-corruption vulnerability has been disclosed in the latest version of the OpenSSL library.

1

80

137

7h

Researchers are warning about a new #malware, dubbed YTStealer, believed to be sold as a service on the dark web, that allows cybercriminals to hijack #YouTube content creator accounts by stealing their authentication cookies. Details: thehackernews.com/2022/06/new-yt #infosec #hacking

New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators

Researchers are warning about a new YouTube hijacking malware, dubbed YTStealer, believed to be sold as a service on the dark web.

53

58

Researchers have discovered a new #Android banking trojan — dubbed "Revive" — targeting customers of the Spanish financial services company BBVA. Read details: thehackernews.com/2022/06/new-an #hacking #malware #cybersecurity #technews #mobilesecurity

New Android Banking Trojan 'Revive' Targeting Users of Spanish Financial Services

Researchers have discovered a new Android banking trojan targeting customers of the Spanish financial services company BBVA.

1

73

98

APT hackers are exploiting unpatched #Microsoft Exchange servers as an initial access vector to deploy ShadowPad #malware on building automation systems. Read details: thehackernews.com/2022/06/apt-ha #infosec #cybersecurity

APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

APT Hackers Use ShadowPad Backdoor and MS Exchange Bug to Target Building Automation Systems

56

80

Topics to follow

Sign up to get Tweets about the Topics you follow in your Home timeline.

Carousel

10h

A new #vulnerability (CVE-2022-30333) has been discovered in RARlab's UnRAR utility that also affects several other applications using it, including Zimbra Mail. thehackernews.com/2022/06/new-un The flaw allows remote attackers to execute arbitrary code on vulnerable Zimbra instances.

New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers

A new vulnerability has been discovered in RARlab's UnRAR utility that also affects several other applications using it, including Zimbra Mail.

29

33

11h

Researchers reveal details about a new #vulnerability in #Microsoft's Azure Service Fabric that could be exploited to gain elevated privileges on #Linux workloads and take control of all nodes in a cluster. Details: thehackernews.com/2022/06/new-fa #infosec #cybersecurity #technology

New 'FabricScape' Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

Researchers reveal details about a new vulnerability in Microsoft's Service Fabric that could be exploited to gain elevated privileges on Linux.

48

58

16h

U.S. cybersecurity agency CISA has added the "PwnKit" #Linux vulnerability to its catalog of known exploited vulnerabilities, citing evidence of active exploitation. Details: thehackernews.com/2022/06/cisa-w #infosec #cybersecurity #hacking

CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild

U.S. cybersecurity agency CISA has added the PwnKit Linux vulnerability to its catalog of known exploited vulnerabilities.

1

58

99

DEAL — Learn NIST Inside Out With 21 Hours of Training @ 86% OFF Access it here: thehackernews.com/2022/06/learn- #infosec #cybersecurity

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF

Be an Expert of RMF and Bring Value to All Cybersecurity Positions with This 21+ Hours of Content

1

20

35

If you're using #Google Analytics, you're likely breaking EU data protection laws. Following in the footsteps of Austria and France, the Italian watchdog has also found that the use of Google Analytics to be non-compliant with EU regulations. thehackernews.com/2022/06/italy- #privacy

Italy Data Protection Authority Warns Websites Against Use of Google Analytics

If you're using Google Analytics, you're likely breaking EU data protection laws.

92

112

Researchers warn of a new #malware, dubbed ZuoRAT, targeting small office/home office routers (SOHO) as part of a sophisticated campaign to spy on North American and European networks. Read details: thehackernews.com/2022/06/zuorat #infosec #cybersecurity #hacking

ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks

Researchers warn of a new malware, dubbed ZuoRAT, targeting small office/home office routers (SOHO) as part of a sophisticated campaign.

3

56

70

Authenticating legacy apps with a reverse proxy cybersecurity.att.com/blogs/security via

@attcyber

1

16

31

Researchers warn of a new #malware campaign driven by "Matanbuchus," a malware-as-a-service (Maas) that spreads via phishing campaigns and drops the Cobalt Strike post-exploitation framework on targeted machines. Read: thehackernews.com/2022/06/resear #infosec #hacking #cybersecurity

Researchers Warn of 'Matanbuchus' Malware Campaign Dropping Cobalt Strike Beacons

Researchers warn of a new malware campaign driven by "Matanbuchus," a malware-as-a-service (Maas) that spreads via phishing campaigns.

4

54

69

Researchers reveal that #ransomware hackers used a zero-day #vulnerability in Mitel VoIP appliances as an entry point to infiltrate an undisclosed company. Read details: thehackernews.com/2022/06/hacker #infosec #cybersecurity #hacking #malware

Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

Researchers reveal that ransomware hackers used a zero-day vulnerability in Mitel VoIP appliances as an entry point to infiltrate a company.

61

67

APT hackers are exploiting unpatched #Microsoft Exchange servers as an initial access vector to deploy ShadowPad #malware on building automation systems. Read details: thehackernews.com/2022/06/apt-ha #infosec #cybersecurity

APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

APT Hackers Use ShadowPad Backdoor and MS Exchange Bug to Target Building Automation Systems

56

80

A remote memory-corruption #vulnerability has been discovered in the latest version of #OpenSSL library that can be exploited very easily by an attacker. Read: thehackernews.com/2022/06/openss "If RCE exploitation is possible, this makes it worse than Heartbleed..."

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

A remote memory-corruption vulnerability has been disclosed in the latest version of the OpenSSL library.

1

80

137

Researchers have discovered a new #Android banking trojan — dubbed "Revive" — targeting customers of the Spanish financial services company BBVA. Read details: thehackernews.com/2022/06/new-an #hacking #malware #cybersecurity #technews #mobilesecurity

New Android Banking Trojan 'Revive' Targeting Users of Spanish Financial Services

Researchers have discovered a new Android banking trojan targeting customers of the Spanish financial services company BBVA.

1

73

98

Information Leak: Posted, Discovered & Misused! How easy for Criminals to get your data?

Information Leak: Posted, Discovered & Misused! How easy for Criminals to get your data? Read: infosecwriteups.com/information-le via

@RakeshKrish12

infosecwriteups.com

NOTE: This article explains about How easy to accumulate Personal Data which are then allegedly used for offensive purposes by…

3

28

47

Chinese state-sponsored hackers are using #ransomware as a ruse to carry out #cyberespionage attacks and hide their true intentions. Read details: thehackernews.com/2022/06/state- #infosec #cybersecurity #malware #hacking

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

Chinese state-sponsored hackers are using ransomware as a ruse to carry out cyber espionage attacks and hide their true intentions.

2

51

68

Researchers are warning of a new #malware tool available on cybercrime forums that allows cybercriminals to easily create malicious Windows shortcut (.LNK) files. Read details: thehackernews.com/2022/06/new-qu #infosec #cybersecurity #hacking #microsoft

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

Researchers are warning of a new malware tool available on cybercrime forums that allows cybercriminals to easily create malicious Windows shortcuts.

3

70

118

What Are Shadow IDs, and How Are They Crucial in 2022? Read details: thehackernews.com/2022/06/what-a #infosec #cybersecurity

What Are Shadow IDs, and How Are They Crucial in 2022?

27

33

DEAL — Learn NIST Inside Out With 21 Hours of Training @ 86% OFF Access it here: thehackernews.com/2022/06/learn- #infosec #cybersecurity

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF

Be an Expert of RMF and Bring Value to All Cybersecurity Positions with This 21+ Hours of Content

1

20

35

Cybersecurity experts warn of "Black Basta" #ransomware that attacked dozens of companies in the U.S., Canada, U.K., Australia, and New Zealand within 2 months of its emergence, making it a prominent threat in a short period of time. Read: thehackernews.com/2022/06/cybers #infosec

Cybersecurity Experts Warn of Emerging Threat of "Black Basta" Ransomware

Cybersecurity experts are warning about the "Black Basta" ransomware gang, which has attacked dozens of companies worldwide.

2

60

82

CODESYS has released security patches to address 11 newly identified vulnerabilities that could lead to information disclosure and a denial of service (DoS) condition, among others. Read details: thehackernews.com/2022/06/critic #infosec #cybersecurity #hacking

Critical Security Flaws Identified in CODESYS ICS Automation Software

CODESYS has released patches to address 11 vulnerabilities that could lead to information disclosure and a denial of service (DoS) condition.

2

38

62

If you're using #Google Analytics, you're likely breaking EU data protection laws. Following in the footsteps of Austria and France, the Italian watchdog has also found that the use of Google Analytics to be non-compliant with EU regulations. thehackernews.com/2022/06/italy- #privacy

Italy Data Protection Authority Warns Websites Against Use of Google Analytics

If you're using Google Analytics, you're likely breaking EU data protection laws.

92

112

Researchers warn of a new #malware campaign driven by "Matanbuchus," a malware-as-a-service (Maas) that spreads via phishing campaigns and drops the Cobalt Strike post-exploitation framework on targeted machines. Read: thehackernews.com/2022/06/resear #infosec #hacking #cybersecurity

Researchers Warn of 'Matanbuchus' Malware Campaign Dropping Cobalt Strike Beacons

Researchers warn of a new malware campaign driven by "Matanbuchus," a malware-as-a-service (Maas) that spreads via phishing campaigns.

4

54

69

Researchers have identified multiple malicious #Python packages designed to steal #AWS credentials and environment variables. thehackernews.com/2022/06/multip What is more worrying is that they upload sensitive, stolen data to a publicly accessible server. #infosec #malware #hacking

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Researchers have identified multiple malicious Python packages designed to steal AWS credentials and environment variables.

6

113

140

Google believes that ISPs may have helped attackers infect the #Android and #iPhone smartphones of high-profile victims with "Hermit" #spyware. Read details: thehackernews.com/2022/06/google #hacking #cybersecurity #infosec #malware #privacy #technology #hackernews

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Google believes that ISPs may have helped attackers infect the Android and iPhone smartphones of high-profile victims with Hermit spyware.

1

83

139

Jun 23

Israeli surveillanceware vendor NSO Group admitted to the European Union lawmakers that its #Pegasus spyware tool was used by at least 5 countries in the region. Read: thehackernews.com/2022/06/nso-co #infosec #cybersecurity #malware #iPhone #Android #MobileSecurity #technology

NSO Confirms Pegasus Spyware Used by at least 5 European Countries

10

112

120

CISA and the Coast Guard have issued a joint advisory warning of ongoing attempts by hackers to exploit the Log4Shell #vulnerability in VMware Horizon servers to steal sensitive data from targeted networks. Read: thehackernews.com/2022/06/log4sh #infosec #cybersecurity #malware #hacking

Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

CISA and the Coast Guard have issued a joint advisory warning of ongoing attempts by hackers to exploit the Log4Shell vulnerability in VMware Horizon

1

79

105

A newly discovered #Magecart attack has been linked to the infrastructure of an ongoing skimming campaign. Read: thehackernews.com/2022/06/newly- #infosec #cybersecurity #hacking

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021.

2

39

61

Jun 23

Tropic Trooper Chinese hacker group has been spotted using a new #malware coded in the Nim #programming language, and distributed hidden inside an "SMS bomber" tool. Read details: thehackernews.com/2022/06/chines #infosec #hacking #cybersecurity

Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside

Tropic Trooper Chinese hacker group has been spotted using a new malware coded in the Nim language, and distributed hidden inside an "SMS bomber" tool

2

61

84

Researchers reveal that #ransomware hackers used a zero-day #vulnerability in Mitel VoIP appliances as an entry point to infiltrate an undisclosed company. Read details: thehackernews.com/2022/06/hacker #infosec #cybersecurity #hacking #malware

Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

Researchers reveal that ransomware hackers used a zero-day vulnerability in Mitel VoIP appliances as an entry point to infiltrate a company.

61

67

Google believes that ISPs may have helped attackers infect the #Android and #iPhone smartphones of high-profile victims with "Hermit" #spyware. Read details: thehackernews.com/2022/06/google #hacking #cybersecurity #infosec #malware #privacy #technology #hackernews

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Google believes that ISPs may have helped attackers infect the Android and iPhone smartphones of high-profile victims with Hermit spyware.

1

83

139

RIG Exploit Kit replaces the Raccoon stealer trojan with Dridex financial #malware after one of its developers was killed in the Russian-Ukrainian war. Read details: thehackernews.com/2022/06/rig-ex #infosec #hackernews #hacking #cybersecurity #technews

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

RIG Exploit Kit replaces Raccoon stealer trojan with Dridex financial malware after one of its developers was killed in the Russian-Ukrainian war.

2

53

75

Europol dismantled an organized #cybercrime group engaged in #phishing, fraud, scams, and money laundering activities. Details: thehackernews.com/2022/06/europo #infosec #hacking #malware #cybersecurity #cyberattack

Europol Busts Phishing Gang Responsible for Millions in Losses

Europol dismantled an organized crime group that dabbled in phishing, fraud, scams, and money laundering activities.

1

67

100

Ukrainian CERT has warned of a new series of Russian cyberattacks exploiting the "Follina" #vulnerability in the Windows operating system to deploy password-stealing malware. Read details: thehackernews.com/2022/06/russia #infosec #cybersecurity #hacking #malware

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Ukrainian CERT has warned of a new series of Russian cyberattacks exploiting the "Follina" vulnerability in the Windows operating system.

52

76

Researchers have identified multiple malicious #Python packages designed to steal #AWS credentials and environment variables. thehackernews.com/2022/06/multip What is more worrying is that they upload sensitive, stolen data to a publicly accessible server. #infosec #malware #hacking