Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances,

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition.
Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that

,

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition.
Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that

, ,
https://thehackernews.com/2022/03/critical-sonicos-vulnerability-affects.html

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials,

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021.
« Transparent Tribe has been a highly active APT group in the Indian subcontinent, » Cisco Talos researchers said in an analysis shared with The Hacker News. « Their primary targets have

,

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021.
« Transparent Tribe has been a highly active APT group in the Indian subcontinent, » Cisco Talos researchers said in an analysis shared with The Hacker News. « Their primary targets have

, ,
https://thehackernews.com/2022/03/new-hacking-campaign-by-transparent.html

Pourquoi l’embargo de semi-conducteurs sud-coréens va (aussi) faire mal à la Russie

Pourquoi l’embargo de semi-conducteurs sud-coréens va (aussi) faire mal à la Russie,

Les composants électroniques coréens font partie de la chaîne d’approvisionnement dont a besoin l’industrie de l’armement russe. Déjà privée de composants américains, européens et japonais, les Russes devraient avoir encore plus de mal à produire (et remplacer) leurs équipements.

,

Les composants électroniques coréens font partie de la chaîne d’approvisionnement dont a besoin l’industrie de l’armement russe. Déjà privée de composants américains, européens et japonais, les Russes devraient avoir encore plus de mal à produire (et remplacer) leurs équipements.

, ,
https://www.01net.com/actualites/pourquoi-l-embargo-de-semi-conducteurs-sud-coreens-va-aussi-faire-mal-a-la-russie-2055693.html

Les États-Unis voient Kaspersky comme une menace pour leur sécurité nationale

Les États-Unis voient Kaspersky comme une menace pour leur sécurité nationale,

L’éditeur est la première entreprise non chinoise à rejoindre une liste qui épingle des fournisseurs high-tech pour les « risques inacceptables » qu’ils représentent. Un coup fatal pour son image de marque.

,

L’éditeur est la première entreprise non chinoise à rejoindre une liste qui épingle des fournisseurs high-tech pour les « risques inacceptables » qu’ils représentent. Un coup fatal pour son image de marque.

, ,
https://www.01net.com/actualites/les-etats-unis-voient-kaspersky-comme-une-menace-pour-leur-securite-nationale-2055686.html

Privid: A Privacy-Preserving Surveillance Video Analytics System

Privid: A Privacy-Preserving Surveillance Video Analytics System,

A group of academics has designed a new system known as « Privid » that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking.
« We’re at a stage right now where cameras are practically ubiquitous. If there’s a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that

,

A group of academics has designed a new system known as « Privid » that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking.
« We’re at a stage right now where cameras are practically ubiquitous. If there’s a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that

, ,
https://thehackernews.com/2022/03/privid-privacy-preserving-surveillance.html

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation,

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks.
The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal

,

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks.
The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal

, ,
https://thehackernews.com/2022/03/critical-sophos-firewall-rce.html

New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

,

An unidentified threat actor has been observed employing a « complex and powerful » malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens.
« The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines, »

,

An unidentified threat actor has been observed employing a « complex and powerful » malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens.
« The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines, »

, ,
https://thehackernews.com/2022/03/new-malware-loader-verblecon-infects.html

Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation,

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an « advanced multi-layered virtual machine » used by the malware to fly under the radar.
Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits

,

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an « advanced multi-layered virtual machine » used by the malware to fly under the radar.
Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits

, ,
https://thehackernews.com/2022/03/experts-detail-virtual-machine-used-by.html

A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages,

A threat actor dubbed « RED-LILI » has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules.
« Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks, » Israeli security company Checkmarx said. « As it seems this time, the attacker has fully-automated the process

,

A threat actor dubbed « RED-LILI » has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules.
« Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks, » Israeli security company Checkmarx said. « As it seems this time, the attacker has fully-automated the process

, ,
https://thehackernews.com/2022/03/a-threat-actor-dubbed-red-lili-has-been.html

Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware

Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware,

A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IcedID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers.
« The emails use a social engineering technique of conversation hijacking (also known as thread hijacking), » Israeli company Intezer said in a report shared with

,

A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IcedID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers.
« The emails use a social engineering technique of conversation hijacking (also known as thread hijacking), » Israeli company Intezer said in a report shared with

, ,
https://thehackernews.com/2022/03/hackers-hijack-email-reply-chains-on.html