3 Overlooked Cybersecurity Breaches

Here are three of the worst breaches, attacker tactics and techniques of 2022, and the...

U.K. and U.S. Sanction 7 Russians for TrickBot, Ryuk, and Conti Ransomware Attacks

In a first-of-its-kind coordinated action, the U.K. and U.S. governments on Thursday levied sanctions against...

Reddit Suffers Security Breach Exposing Internal Documents and Source Code

Popular social news aggregation platform Reddit has disclosed that it was the victim of a...

Threat Report 10th February 2023

The NCSC’s threat report is drawn from recent open source reporting....

Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices

A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things...

THN Webinar – Learn How to Comply with New Cyber Insurance Identity Security Requirements

The Hacker News is thrilled to announce the launch of our new educational webinar series,...

NewsPenguin Threat Actor Emerges with Malicious Campaign Targeting Pakistani Entities

A previously unknown threat actor dubbed NewsPenguin has been linked to a phishing campaign targeting Pakistani entities...

9 Comments

A Hackers Pot of Gold: Your MSP’s Data

A single ransomware attack on a New Zealand managed service provider (MSP) disrupted several of...

Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms

The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K.,...

OpenSSL Fixes Multiple New Security Flaws with Latest Update

The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug...

NIST Standardizes Ascon Cryptographic Algorithm for IoT and Other Lightweight Devices

The U.S. National Institute of Standards and Technology (NIST) has announced that a family of...

Unpatched Security Flaws Disclosed in Multiple Document Management Systems

Multiple unpatched security flaws have been disclosed in open source and freemium Document Management System...

Sydney Man Sentenced for Blackmailing Optus Customers After Data Breach

A Sydney man has been sentenced to an 18-month Community Correction Order (CCO) and 100 hours of...

Social Engineer Yourself

If you google the definition for social engineering, you’ll probably find something like “the use...

NIST Cloud Computing Forensic Reference Architecture: NIST Requests Public Comments on SP 800-201

The initial public draft of NIST Special Publication (SP) 800-201, NIST Cloud Computing Forensic Reference...

Announcement of Proposal to Update NIST SP 800-38E, Using the XTS-AES Mode for Confidentiality on Storage Devices

In August 2021, NIST’s Crypto Publication Review Board announced the review of NIST Special Publication...

NIST Cloud Computing Forensic Reference Architecture: NIST Requests Public Comments on SP 800-201

The initial public draft of NIST Special Publication (SP) 800-201, NIST Cloud Computing Forensic Reference...

Announcement of Proposal to Update NIST SP 800-38E, Using the XTS-AES Mode for Confidentiality on Storage Devices

In August 2021, NIST’s Crypto Publication Review Board announced the review of NIST Special Publication...

Russian Hackers Using Graphiron Malware to Steal Data from Ukraine

A Russia-linked threat actor has been observed deploying a new information-stealing malware in cyber attacks...

How to Think Like a Hacker and Stay Ahead of Threats

To succeed as a cybersecurity analyst, you need to understand the traits, values, and thought...

Russian Hacker Pleads Guilty to Money Laundering Linked to Ryuk Ransomware

A Russian national on February 7, 2023, pleaded guilty in the U.S. to money laundering...

CERT-UA Alerts Ukrainian State Authorities of Remcos Software-Fueled Cyber Attacks

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of cyber attacks against...

Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement

A joint law enforcement operation conducted by Germany, the Netherlands, and Poland has cracked yet...

Hackers Exploit Vulnerabilities in Sunlogin to Deploy Sliver C2 Framework

Threat actors are leveraging known flaws in Sunlogin software to deploy the Sliver command-and-control (C2)...

Tackling the New Cyber Insurance Requirements: Can Your Organization Comply?

With cyberattacks around the world escalating rapidly, insurance companies are ramping up the requirements to...

NIST Selects ‘Lightweight Cryptography’ Algorithms to Protect Small Devices

The algorithms are designed to protect data created and transmitted by the Internet of Things...

Lightweight Cryptography Standardization Process: NIST Selects Ascon

The NIST Lightweight Cryptography Team has reviewed the finalists based on their submission packages, status...

Lightweight Cryptography Standardization Process: NIST Selects Ascon

The NIST Lightweight Cryptography Team has reviewed the finalists based on their submission packages, status...

NIST Selects ‘Lightweight Cryptography’ Algorithms to Protect Small Devices

The algorithms are designed to protect data created and transmitted by the Internet of Things...

Linux Variant of Clop Ransomware Spotted, But Uses Faulty Encryption Algorithm

The first-ever Linux variant of the Clop ransomware has been detected in the wild, but...