SonicWall Zero-Day

Hackers are exploiting a zero-day in SonicWall: In an email, an NCC Group spokeswoman wrote: "Our team has observed signs of an attempted exploitation of a vulnerabilitythat affects the SonicWall SMA 100 series devices. We are working closely with SonicWall to investigate this in more depth." In...

Presidential Cybersecurity and Pelotons

President Biden wants his Peloton in the White House. For those who have missed the hype, its an Internet-connected stationary bicycle. It has a screen, a camera, and a microphone. You can take live classes online, work out with your friends, or join the exercise social network. And all of that i...

New Chrome Browser 0-day Under Active Attack—Update Immediately!

Google has patched a zero-day vulnerability in Chrome web browser for desktop that it says is being actively exploited in the wild. The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw CVE-2021-21148 in its V8 JavaScript rendering engine...

Hackers leak millions of Airtel India user data with Aadhaar numbers

By Waqas Airtel India claims it did not suffer a data breach and there are inaccuracies in claims made by the hackers. This is a post from HackRead.com Read the original post: Hackers leak millions of Airtel India user data with Aadhaar numbers...

Hackers access customers database by scamming UScellular staff

By Waqas The data breach may have allowed unauthorized individuals to access UScellular wireless customers' accounts and wireless phone numbers. This is a post from HackRead.com Read the original post: Hackers access customers database by scamming UScellular staff...

5 cases when ethical hackers saved companies from devastating hacks

By Habiba Rashid Ethical hackers are the good guys in the cybersecurity industry - Here are 5 instances where these hackers have rescued companies from cyberattacks. This is a post from HackRead.com Read the original post: 5 cases when ethical hackers saved companies from devastating hacks...

Including Hackers in NATO Wargames

This essay makes the point that actual computer hackers would be a useful addition to NATO wargames: The international information security community is filled with smart people who are not in a military structure, many of whom would be excited to pose as independent actors in any upcoming...

Hezbollah linked hackers hit companies in global malware attack

By Deeba Ahmed The APT group has developed a new version of Explosive malware RAT remote access trojan and stealthily hacking businesses worldwide. This is a post from HackRead.com Read the original post: Hezbollah linked hackers hit companies in global malware attack...

Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild

Apple on Tuesday released updates for iOS, iPadOS, and tvOS with fixes for three security vulnerabilities that it says may have been actively exploited in the wild. Reported by an anonymous researcher, the three zero-day flaws — CVE-2021-1782, CVE-2021-1870, and CVE-2021-1871 — could have allowed...

TikTok vulnerability allowed hackers to access users’ phone numbers

By Waqas The vulnerability which has now been fixed by TikTok existed in its "Find Friends." This is a post from HackRead.com Read the original post: TikTok vulnerability allowed hackers to access users phone numbers...

Malwarebytes says it was also breached by SolarWinds hackers

By Waqas According to Malwarebytes, SolarWinds hackers accessed its internal email communication. Here's what we know so far. This is a post from HackRead.com Read the original post: Malwarebytes says it was also breached by SolarWinds hackers...

Sophisticated Watering Hole Attack

Googles Project Zero has exposed a sophisticated watering-hole attack targeting both Windows and Android: Some of the exploits were zero-days, meaning they targeted vulnerabilities that at the time were unknown to Google, Microsoft, and most outside researchers both companies have since patched t...

Hackers compromised IObit forum to spread DeroHE ransomware

By Waqas Over the weekend, Windows utility developer IObit was hacked to facilitate a widespread attack for distributing the DeroHE ransomware. This is a post from HackRead.com Read the original post: Hackers compromised IObit forum to spread DeroHE ransomware...

The SolarWinds Hackers Used Tactics Other Groups Will Copy

The supply chain threat was just the beginning...

Livecoin crypto exchange shuts down after losing domain to hackers

By Waqas The decision comes after Livecoin claims its servers were hacked and taken over by attackers in December 2020. This is a post from HackRead.com Read the original post: Livecoin crypto exchange shuts down after losing domain to hackers...

Hackers Used Zero-Days to Infect Windows and Android Devices

Google researchers say the campaign, which booby-trapped sites to ensnare targets, was carried out by a “highly sophisticated actor.”...

Warning as hackers breach MFA to target cloud services

By Deeba Ahmed According to CISA, it has verified one of the users had their account breached even though they were using "proper multi-factor authentication MFA." This is a post from HackRead.com Read the original post: Warning as hackers breach MFA to target cloud services...

PT-2021-1546

Name of the Vulnerable Software and Affected Versions Microsoft Defender versions prior to the fixed version Description The issue is related to insufficient input validation in the mpengine.dll library of Microsoft Defender, allowing a remote attacker to execute arbitrary code using a specially...

Fake Trump’s scandle video campaign spreading QNode RAT

By Deeba Ahmed Hackers are benefitting from the unrest after the US Presidential elections and spreading QNode malware. Here's what's going on behind the scene. This is a post from HackRead.com Read the original post: Fake Trumps scandle video campaign spreading QNode RAT...

SolarWinds Hackers Also Accessed U.S. Justice Department's Email Server

The U.S. Department of Justice on Wednesday became the latest government agency in the country to admit its internal network was compromised as part of the SolarWinds supply chain attack. "On December 24, 2020, the Department of Justice's Office of the Chief Information Officer OCIO learned of...