The Hacker News8h
New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection
New Snake Keylogger variant evades detection using AutoIt, leading to 280M blocked attacks targeting Windows users across ...
The Hacker News16h
CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List
CISA warns of active exploitation of Palo Alto Networks and SonicWall vulnerabilities, requiring agencies to patch by March ...
The Hacker News12h
Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack
Hackers use trojanized game installers to spread the StaryDobry XMRig miner, hijacking gaming PCs with 8+ core CPUs.
The Hacker News17h
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
Microsoft discovers new XCSSET macOS malware variant with enhanced obfuscation, persistence, and infection strategies.
The Hacker News1d
Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication
"An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allow ...
The Hacker News1d
Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks
Mustang Panda exploits MAVInject.exe to evade ESET detection, using EA files to sideload TONESHELL backdoor for persistent ...
The Hacker News2d
South Korea Suspends DeepSeek AI Downloads Over Privacy Violations
South Korea halts DeepSeek AI downloads from February 15, 2025, over privacy violations and security flaws, pending ...
The Hacker News1d
New FrigidStealer Malware Targets macOS Users via Fake Browser Updates
TA2726, per the enterprise security firm, acts as a TDS for TA2727 and another threat actor called TA569, which is ...
The Hacker News1d
New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials
Xerox VersaLink MFP vulnerabilities (CVE-2024-12510, CVE-2024-12511) enable credential theft via LDAP and SMB/FTP. Patch now ...
The Hacker News1d
âš¡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More
It's time for a new security approach. Replace traditional security technology that exposes your attack surface and allows ...
The Hacker News2d
New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations
New Golang malware leverages Telegram for C2, executing PowerShell commands and self-destructing to evade detection.
The Hacker News1d
New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
Two security vulnerabilities have been discovered in the OpenSSH secure networking utility suite that, if successfully ...