Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games

Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected third-party game servers. "An attacker could remotely crash an opponent's game client to force a win or even...

Solorigate/Sunburst : Theft of Cybersecurity Tools | FireEye Breach

Update Jan 5, 2021: New patching section with two new dashboard widgets showing the number of missing FireEye-related patches in your environment and the number of assets in your environment missing one of those patches. Update Dec 23, 2020: Added a new section on compensating controls. Update De...

Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen

FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers. The company said it's...

Js-X-Ray - JavaScript And Node.js Open-Source SAST Scanner (A Static Analysis Of Detecting Most Common Malicious Patterns)

JavaScript AST analysis. This package has been created to export the Node-Secure AST Analysis to enable better code evolution and allow better access to developers and researchers. The goal is to quickly identify dangerous code and patterns for developers and Security researchers. Interpreting th...

Hackers hiding skimming malware behind social media sharing icons

By Sudais Asif According to researchers, the malware hides behind icons from top networks such as Facebook, Instagram, Twitter, Google, YouTube, and Pinterest. This is a post from HackRead.com Read the original post: Hackers hiding skimming malware behind social media sharing icons...

The Evolution and Development of Hacking

By David Balaban In the world of computers, to perform any action, including malicious actions, tools are needed - software. Any cyberattack requires its own set of tools. Yes, it is obvious but let us dive into details. There are many ready-made exploits and viruses sold on the network for almos...

This Notorious Botnet Has an Alarming New Trick

The hackers behind TrickBot have begun probing victim PCs for vulnerable firmware, which would let them persist on devices undetected...

Hackers Are Targeting the Covid-19 Vaccine ‘Cold Chain’

As vaccines await US approval, a sophisticated global phishing campaign has tried to harvest credentials from companies involved in their distribution...

Hackers steal sensitive client data in Israeli insurance firm data breach

By Deeba Ahmed BlackShadow hackers took responsibility for the attack and leaked the data online belonging to Shirbit's customers. This is a post from HackRead.com Read the original post: Hackers steal sensitive client data in Israeli insurance firm data breach...

OceanLotus hackers hit macOS users with new malware

By Sudais Asif For now, researchers believe that the malware is targeting Vietnamese users however it is about time it hits macOS users around the world. This is a post from HackRead.com Read the original post: OceanLotus hackers hit macOS users with new malware...

GoDaddy employees tricked in attack against cryptocurrency firms

By Deeba Ahmed Earlier this month, hackers targeted GoDaddy customers to modify the DNS settings of at least two cryptocurrency website. Here's what happened. This is a post from HackRead.com Read the original post: GoDaddy employees tricked in attack against cryptocurrency firms...

On That Dusseldorf Hospital Ransomware Attack and the Resultant Death

Wired has a detailed story about the ransomware attack on a Dusseldorf hospital, the one that resulted in an ambulance being redirected to a more distant hospital and the patient dying. The police wanted to prosecute the ransomware attackers for negligent homicide, but the details were more...

Malware service operators arrested; offered antivirus bypassing tools

By Deeba Ahmed The malware encryption service run by a Romanian duo helped hackers embed malicious code in legit software to bypass antivirus tools. This is a post from HackRead.com Read the original post: Malware service operators arrested; offered antivirus bypassing tools...

A Facebook Messenger Flaw Could Have Let Hackers Listen In

The vulnerability was found through the company's bug bounty program, now in its tenth year...

Trump Fires Security Chief Christopher Krebs

President Trump on Tuesday fired his top election security official Christopher Krebs no relation. The dismissal came via Twitter two weeks to the day after Trump lost an election he baselessly claims was stolen by widespread voting fraud. Chris Krebs. Image: CISA. Krebs, 43, is a former Microsof...

A week in security (November 9 – November 15)

Last week on Malwarebytes Labs, we reported on multiple patch releases: from Mozillas Firefox and Thunderbird to Googles Chrome. We also had a chat with our resident experts, Adam Kujawa and John Donovan, about the future of IoT cybersecurity in our latest Lock and Code podcast episode. Lastly, w...

New Jupyter backdoor malware steals Chrome, Firefox data

By Sudais Asif Researchers believe that the new Jupyter infostealer is being operated by Russian speaking hackers. This is a post from HackRead.com Read the original post: New Jupyter backdoor malware steals Chrome, Firefox data...

Hackers-for-hire APT group found targeting businesses globally

By Deeba Ahmed A hackers-for-hire APT group is using a strain of yet undocumented malware and targeting South Asian firms in the CostaRicto campaign. This is a post from HackRead.com Read the original post: Hackers-for-hire APT group found targeting businesses globally...

Uncovered: APT 'Hackers For Hire' Target Financial, Entertainment Firms

A hackers-for-hire operation has been discovered using a strain of previously undocumented malware to target South Asian financial institutions and global entertainment companies. Dubbed "CostaRicto" by Blackberry researchers, the campaign appears to be the handiwork of APT mercenaries who posses...

Dive Deep into VMDR

Qualys devoted the second day of the QSC USA 2020 virtual conference entirely to vulnerability management, detection and response VMDR, a critical area for the security and compliance of hybrid cloud IT environments. Mehul Revankar, VP of Product Management and Engineering for VMDR at Qualys, set...