N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

Cybersecurity researchers have offered a closer look at the RokRAT remote access trojan that's employed by the North Korean state-sponsored actor known as ScarCruft.
"RokRAT is a sophisticated remote access trojan (RAT) that has been observed as a critical component within the attack chain, enabling the threat actors to gain unauthorized access, exfiltrate sensitive information, and potentially

https://thehackernews.com/2023/06/n-kore...ploit.html

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrails and achieve their goals.
The new version, dubbed Sphynx and announced in February 2023, packs a "number of updated capabilities that strengthen the group's efforts to evade detection," IBM Security X-Force said in a new analysis.
The "

https://thehackernews.com/2023/06/improv...rikes.html

How Wazuh Improves IT Hygiene for Cyber Security Resilience

IT hygiene is a security best practice that ensures that digital assets in an organization's environment are secure and running properly. Good IT hygiene includes vulnerability management, security configuration assessments, maintaining asset and system inventories, and comprehensive visibility into the activities occurring in an environment.
As technology advances and the tools used by

https://thehackernews.com/2023/06/how-wa...cyber.html

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

Researchers have discovered a novel attack on the Python Package Index (PyPI) repository that employs compiled Python code to sidestep detection by application security tools.
"It may be the first supply chain attack to take advantage of the fact that Python bytecode (PYC) files can be directly executed," ReversingLabs analyst Karlo Zanki said in a report shared with The Hacker News.
The package

https://thehackernews.com/2023/06/malici...piled.html

“A Matter of Trust“: Volkswagen supports 4th Kultursymposium of Goethe-Institut

“A Matter of Trust“: Volkswagen supports 4th Kultursymposium of Goethe-Institut in Weimar...

https://www.volkswagenag.com/en/news/202...trust.html

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

WordPress has issued an automatic update to address a critical flaw in the Jetpack plugin that’s installed on over five million sites.
The vulnerability, which was unearthed during an internal security audit, resides in an API present in the plugin since version 2.0, which was released in November 2012.
“This vulnerability could be used by authors on a site to manipulate any files in the

https://thehackernews.com/2023/06/urgent...tical.html

Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
Tracked as CVE-2023-28771 (CVSS score: 9.8), the issue relates to a command injection flaw impacting different firewall models that could enable an unauthenticated attacker

https://thehackernews.com/2023/06/active...iting.html

Ford Next Launches Flexible Lease Pilot – Ford Drive – With Uber, Aiming to Boo

Ford Next is collaborating with Uber to deliver a new lease option for rideshare drivers going electric.


https://media.ford.com/content/fordmedia...uber-.html

UAW leaders: Detroit 3 can afford our demands

<p>UAW President Shawn Fain, speaking with other union officials at a virtual town hall, vowed to fight for better wages and benefits during contract talks this year.</p>

https://www.autonews.com/manufacturing/u...ell-strike

New eID Scheme Gives EU Citizens Easy Access to Public Services Online

The European Commission voted a new electronic identification scheme that creates new opportunities for EU citizens and businesses.

https://www.darkreading.com/operations/n...ces-online