Why Shadow APIs are More Dangerous than You Think

Shadow APIs are a growing risk for organizations of all sizes as they can mask malicious behavior and induce substantial data loss. For those that aren't familiar with the term, shadow APIs are a type of application programming interface (API) that isn't officially documented or supported. 
Contrary to popular belief, it's unfortunately all too common to have APIs in production that no one on

https://thehackernews.com/2023/04/why-sh...-than.html

Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

The Transparent Tribe threat actor has been linked to a set of weaponized Microsoft Office documents in intrusions directed against the Indian education sector to deploy a continuously maintained piece of malware called Crimson RAT.
While the suspected Pakistan-based threat group is known to target military and government entities in the country, the activities have since expanded to include the

https://thehackernews.com/2023/04/pakist...tribe.html

New Python-Based "Legion" Hacking Tool Emerges on Telegram

An emerging Python-based credential harvester and a hacking tool named Legion is being marketed via Telegram as a way for threat actors to break into various online services for further exploitation.
Legion, according to Cado Labs, includes modules to enumerate vulnerable SMTP servers, conduct remote code execution (RCE) attacks, exploit unpatched versions of Apache, and brute-force cPanel and

https://thehackernews.com/2023/04/new-py...-tool.html

WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Atta

Popular instant messaging app WhatsApp on Thursday announced a new account verification feature that ensures that malware running on a user's mobile device doesn't impact their account.
"Mobile device malware is one of the biggest threats to people's privacy and security today because it can take advantage of your phone without your permission and use your WhatsApp to send unwanted messages,"

https://thehackernews.com/2023/04/whatsa...evice.html

RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

Cybersecurity researchers have detailed the tactics of a "rising" cybercriminal gang called "Read The Manual" (RTM) Locker that functions as a private ransomware-as-a-service (RaaS) provider and carries out opportunistic attacks to generate illicit profit.
"The 'Read The Manual' Locker gang uses affiliates to ransom victims, all of whom are forced to abide by the gang's strict rules,"

https://thehackernews.com/2023/04/rtm-lo...group.html

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

Google on Thursday outlined a set of initiatives aimed at improving the vulnerability management ecosystem and establishing greater transparency measures around exploitation.
"While the notoriety of zero-day vulnerabilities typically makes headlines, risks remain even after they're known and fixed, which is the real story," the company said in an announcement. "Those risks span everything from

https://thehackernews.com/2023/04/google...urity.html

Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice

In today's fast-paced and ever-changing digital landscape, businesses of all sizes face a myriad of cybersecurity threats. Putting in place the right people, technological tools and services, MSSPs are in a great position to ensure their customers' cyber resilience. 
The growing need of SMEs and SMBs for structured cybersecurity services can be leveraged by MSPs and MSSPs to provide strategic

https://thehackernews.com/2023/04/webina...mssps.html

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The two flaws are listed below -

CVE-2023-20963 (CVSS score: 7.8) - Android Framework Privilege Escalation Vulnerability
CVE-2023-29492 (CVSS score: TBD) - Novi Survey Insecure Deserialization Vulnerability

https://thehackernews.com/2023/04/severe...urvey.html

Electric Mustang Super Cobra Jet 1800 Prototype Targets New NHRA World Records For E

Today, Ford Performance unveiled the continued evolution of its electric-powered motorsports efforts with the Mustang Super Cobra Jet 1800, an aggressive revision to the NHRA world record-holding Mustang Cobra Jet 1400.


https://media.ford.com/content/fordmedia...-nhra.html

[b]Gen 2 Coyote Swapped SN95 Going Into ETC FMEM Under Load[/b]

I have a SN95 that's been coyote swapped, only modifications are a cold air intake, long tube headers, and an IMRC delete. The car came to my shop...


https://forum.hptuners.com/showthread.php?103078-Gen-2-Coyote-Swapped-SN95-Going-Into-ETC-FMEM-Under-Load&goto=newpost