'EvilExtractor' All-in-One Stealer Campaign Targets Windows User Data

An uptick in EvilExtractor activity aims to compromise endpoints to steal browser from targets across Europe and the US, researchers say.

https://www.darkreading.com/endpoint/evi...windows-os

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

Kim Jong Un's Swiss Army knife APT continues to spread its tendrils around the world, showing it's not intimidated by the researchers closing in.

https://www.darkreading.com/threat-intel...lic-outing

Shields Health Breach Exposes 2.3M Users' Data

The medical imaging firm's systems were compromised by a threat actor, exposing patients' driver's licenses and other identifying information.

https://www.darkreading.com/attacks-brea...users-data

Getting Started as a High School Bug Hunter: Cubed's Hacker AFK




https://www.hackerone.com/hackerone-comm...hacker-afk

3CX Cyber Attack: It Was The Aftermath Of Another Supply-Chain Attack

Days after the horrifying cyberattack, more details about the 3CX incident surface online as Mandiant…

3CX Cyber Attack: It Was The Aftermath Of Another Supply-Chain Attack on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

6 Best Marketing Data Extractor Tools for Your Business Needs

Companies require data to make informed decisions, optimize operations, and drive growth to compete in…

6 Best Marketing Data Extractor Tools for Your Business Needs on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Attackers use abandoned WordPress plugin to backdoor websites


Attackers are using Eval PHP, an outdated legitimate WordPress plugin, to compromise websites by injecting stealthy backdoors. [...]


https://www.bleepingcomputer.com/news/se...-websites/

University websites using MediaWiki, TWiki hacked to serve Fortnite spam


Websites of multiple U.S. universities are serving Fortnite and 'gift card' spam. Researchers observed Wiki and documentation pages being hosted by universities including Stanford, MIT, Berkeley, UMass Amherst, Northeastern, Caltech, among others, were compromised. [...]


https://www.bleepingcomputer.com/news/se...nite-spam/

American Bar Association data breach hits 1.4 million members


The American Bar Association (ABA) has suffered a data breach after hackers compromised its network and gained access to older credentials for 1,466,000 members. [...]


https://www.bleepingcomputer.com/news/se...n-members/

Kubernetes RBAC abused to create persistent cluster backdoors


Hackers use a novel method involving RBAC (Role-Based Access Control) to create persistent backdoor accounts on Kubernetes clusters and hijack their resources for Monero crypto-mining. [...]


https://www.bleepingcomputer.com/news/se...backdoors/