The Hacker News | #1 Trusted Cybersecurity News Site
Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning (ML) related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply chain security firm JFrog said in an analysis published last week.
Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday
Oct 8, 2024 · A source told Reuters that "Ukrainian hackers 'congratulated' Putin on his birthday by carrying out a large-scale attack on the all-Russian state television and radio broadcasting company." The attack is believed to be the work of a pro-Ukrainian hacker group called Sudo rm-RF. The Russian government has since said an investigation into the ...
Firefox Zero-Day Under Attack: Update Your Browser Immediately
Oct 10, 2024 · Mozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in the wild.
Bohemia and Cannabia Dark Web Markets Taken Down After Joint …
Oct 11, 2024 · Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation. The Dutch police have announced the takedown of Bohemia and Cannabia, which has been described as the world's largest and longest-running dark web market for illegal goods, drugs, and cybercrime services. The takedown is the result of a collaborative investigation ...
Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting …
Oct 4, 2024 · Cloudflare has disclosed that it mitigated a record-breaking distributed denial-of-service (DDoS) attack that peaked at 3.8 terabits per second (Tbps) and lasted 65 seconds. The web infrastructure and security company said it fended off "over one hundred hyper-volumetric L3/4 DDoS attacks throughout last month, with many exceeding 2 billion ...
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively ...
Oct 9, 2024 · Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday update doesn't include the 25 additional flaws ...
THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)
As of September 21, 2024, 72.4% of CVEs (18,358 CVEs) in the NVD have yet to be analyzed, VulnCheck said, adding "46.7% of Known Exploited Vulnerabilities (KEVs) remain unanalyzed by the NVD (compared to 50.8% as of May 19, 2024)." It's worth noting that a total of 25,357 new vulnerabilities have been added to NVD since February 12, 2024, when ...
The Rise of Zero-Day Vulnerabilities: Why Traditional Security ...
Oct 15, 2024 · A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit these flaws before any defensive measures can be implemented, making zero-days a potent weapon for cybercriminals. A recent example is, for instance, CVE-2024-0519 in Google Chrome: this high ...
Chinese Hackers Infiltrate U.S. Internet Providers in Cyber …
Sep 26, 2024 · Nation-state threat actors backed by Beijing broke into a "handful" of U.S. internet service providers (ISPs) as part of a cyber espionage campaign orchestrated to glean sensitive information, The Wall Street Journal reported Wednesday.. The activity has been attributed to a threat actor that Microsoft tracks as Salt Typhoon, which is …
The Hacker News — Cybersecurity Articles Posted on 30 …
The Australian government has passed a bill that markedly increases the penalty for companies suffering from serious or repeated data breaches. To that end, the maximum fines have been bumped up from the current AU$2.22 million t... READ THIS ARTICLE. Web stories about all latest cybersecurity and hacking news articles published on 30 November ...