China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor

Researchers observed downloads of installers for the APT's flagship backdoor, MgBot, when users at a Chinese NGO were updating legitimate applications.

https://www.darkreading.com/attacks-brea...m-backdoor

Lazarus, Scarcruft North Korean APTs Shift Tactics, Thrive

As threat actors around the world grow and evolve, APTs from the DPRK stand out for their spread and variety of targets.

https://www.darkreading.com/endpoint/laz...ics-thrive

The Evolution of HackerOne's Live Hacking Events




https://www.hackerone.com/hackerone-comm...ing-events

Ambassador Spotlight AWC Edition: Blaklis




https://www.hackerone.com/hackerone-comm...on-blaklis

Secure API Management For IoT: Basics And Fundamentals

Many technological innovations have propelled the digital revolution. But none of these has arguably had…

Secure API Management For IoT: Basics And Fundamentals on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

AuKill Malware Actively Used To Disable EDR In Ongoing Attacks

Researchers have discovered a new malware that remained under the radar for quite some time.…

AuKill Malware Actively Used To Disable EDR In Ongoing Attacks on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Google Authenticator Introduces Google Account Sync

Google has improved its popular authenticator app – the Google Authenticator – to further assist…

Google Authenticator Introduces Google Account Sync on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

401 and 403 Bypass Cheat Sheet for Penetration Testers

This 401 and 403 bypass cheat sheet is an essential guide for penetration testers looking…

401 and 403 Bypass Cheat Sheet for Penetration Testers on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

New Atomic macOS info-stealing malware targets 50 crypto wallets


A new macOS information-stealing malware named 'Atomic' (aka 'AMOS') is being sold to cybercriminals via private Telegram channels for a subscription of $1,000 per month. [...]


https://www.bleepingcomputer.com/news/se...o-wallets/

Microsoft fixes Outlook issue blocking access to emails, calendars


Microsoft has addressed a known issue affecting Outlook for Microsoft 365 customers that prevented them from accessing group mailboxes and calendars using the Outlook desktop client. [...]


https://www.bleepingcomputer.com/news/mi...calendars/