Ex-Twitter employee Gets 3.5 Years Jail for Spying on Behalf of Saudi Arabia

Ex-Twitter employee Gets 3.5 Years Jail for Spying on Behalf of Saudi Arabia,

A former Twitter employee who was found guilty of spying on behalf of Saudi Arabia by sharing data pertaining to specific individuals has been sentenced to three-and-a-half years in prison.
Ahmad Abouammo, 45, was convicted earlier this August on various criminal counts, including money laundering, fraud, falsifying records, and being an illegal agent of a foreign government.
Abouammo was

,

A former Twitter employee who was found guilty of spying on behalf of Saudi Arabia by sharing data pertaining to specific individuals has been sentenced to three-and-a-half years in prison.
Ahmad Abouammo, 45, was convicted earlier this August on various criminal counts, including money laundering, fraud, falsifying records, and being an illegal agent of a foreign government.
Abouammo was

, ,
https://thehackernews.com/2022/12/ex-twitter-employee-gets-35-years-jail.html

Cyber Security Is Not a Losing Game – If You Start Right Now

Cyber Security Is Not a Losing Game – If You Start Right Now,

Reality has a way of asserting itself, irrespective of any personal or commercial choices we make, good or bad. For example, just recently, the city services of Antwerp in Belgium were the victim of a highly disruptive cyberattack. 
As usual, everyone cried « foul play » and suggested that proper cybersecurity measures should have been in place. And again, as usual, it all happens a bit too late.

,

Reality has a way of asserting itself, irrespective of any personal or commercial choices we make, good or bad. For example, just recently, the city services of Antwerp in Belgium were the victim of a highly disruptive cyberattack. 
As usual, everyone cried « foul play » and suggested that proper cybersecurity measures should have been in place. And again, as usual, it all happens a bit too late.

, ,
https://thehackernews.com/2022/12/cyber-security-is-not-losing-game-if.html

GitHub Announces Free Secret Scanning for All Public Repositories

GitHub Announces Free Secret Scanning for All Public Repositories,

GitHub on Thursday said it is making available its secret scanning service to all public repositories on the code hosting platform for free.
« Secret scanning alerts notify you directly about leaked secrets in your code, » the company said, adding it’s expected to complete the rollout by the end of January 2023. 
Secret scanning is designed to examine repositories for access tokens, private keys,

,

GitHub on Thursday said it is making available its secret scanning service to all public repositories on the code hosting platform for free.
« Secret scanning alerts notify you directly about leaked secrets in your code, » the company said, adding it’s expected to complete the rollout by the end of January 2023. 
Secret scanning is designed to examine repositories for access tokens, private keys,

, ,
https://thehackernews.com/2022/12/github-announces-free-secret-scanning.html

Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic Algorithm

Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic Algorithm,

The U.S. National Institute of Standards and Technology (NIST), an agency within the Department of Commerce, announced Thursday that it’s formally retiring the SHA-1 cryptographic algorithm.
SHA-1, short for Secure Hash Algorithm 1, is a 27-year-old hash function used in cryptography and has since been deemed broken owing to the risk of collision attacks.
While hashes are designed to be

,

The U.S. National Institute of Standards and Technology (NIST), an agency within the Department of Commerce, announced Thursday that it’s formally retiring the SHA-1 cryptographic algorithm.
SHA-1, short for Secure Hash Algorithm 1, is a 27-year-old hash function used in cryptography and has since been deemed broken owing to the risk of collision attacks.
While hashes are designed to be

, ,
https://thehackernews.com/2022/12/goodbye-sha-1-nist-retires-27-year-old.html

Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet

Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet,

Microsoft on Thursday flagged a cross-platform botnet that’s primarily designed to launch distributed denial-of-service (DDoS) attacks against private Minecraft servers.
Called MCCrash, the botnet is characterized by a unique spreading mechanism that allows it to propagate to Linux-based devices despite originating from malicious software downloads on Windows hosts.
« The botnet spreads by

,

Microsoft on Thursday flagged a cross-platform botnet that’s primarily designed to launch distributed denial-of-service (DDoS) attacks against private Minecraft servers.
Called MCCrash, the botnet is characterized by a unique spreading mechanism that allows it to propagate to Linux-based devices despite originating from malicious software downloads on Windows hosts.
« The botnet spreads by

, ,
https://thehackernews.com/2022/12/minecraft-servers-under-attack.html

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation in the wild.
The now-patched critical flaws, tracked as CVE-2022-26500 and CVE-2022-26501, are both rated 9.8 on the CVSS scoring system, and could be leveraged to

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation in the wild.
The now-patched critical flaws, tracked as CVE-2022-26500 and CVE-2022-26501, are both rated 9.8 on the CVSS scoring system, and could be leveraged to

, ,
https://thehackernews.com/2022/12/cisa-alert-veeam-backup-and-replication.html

Chantage, menaces… Comment des applications Android font chanter leurs utilisateurs

Chantage, menaces… Comment des applications Android font chanter leurs utilisateurs,

play store android malware

Des applications Android malveillantes cherchent à extorquer de l’argent à leurs utilisateurs. Pour convaincre leurs victimes de payer des sommes colossales, les pirates menacent de divulguer des informations privées, dont des photos intimes.

,

play store android malware

Des applications Android malveillantes cherchent à extorquer de l’argent à leurs utilisateurs. Pour convaincre leurs victimes de payer des sommes colossales, les pirates menacent de divulguer des informations privées, dont des photos intimes.

, ,
https://www.01net.com/actualites/chantage-menaces-comment-applications-android-chanter-utilisateurs.html

Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities

Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities,

A Chinese-speaking advanced persistent threat (APT) actor codenamed MirrorFace has been attributed to a spear-phishing campaign targeting Japanese political establishments.
The activity, dubbed Operation LiberalFace by ESET, specifically focused on members of an unnamed political party in the nation with the goal of delivering an implant called LODEINFO and a hitherto unseen credential stealer

,

A Chinese-speaking advanced persistent threat (APT) actor codenamed MirrorFace has been attributed to a spear-phishing campaign targeting Japanese political establishments.
The activity, dubbed Operation LiberalFace by ESET, specifically focused on members of an unnamed political party in the nation with the goal of delivering an implant called LODEINFO and a hitherto unseen credential stealer

, ,
https://thehackernews.com/2022/12/researchers-uncover-mirrorface-cyber.html

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as ‘Critical’

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as ‘Critical’

,

Microsoft has revised the severity of a security vulnerability it originally patched in September 2022, upgrading it to « Critical » after it emerged that it could be exploited to achieve remote code execution.
Tracked as CVE-2022-37958 (CVSS score: 8.1), the flaw was previously described as an information disclosure vulnerability in SPNEGO Extended Negotiation (NEGOEX) Security Mechanism.
SPNEGO,

,

Microsoft has revised the severity of a security vulnerability it originally patched in September 2022, upgrading it to « Critical » after it emerged that it could be exploited to achieve remote code execution.
Tracked as CVE-2022-37958 (CVSS score: 8.1), the flaw was previously described as an information disclosure vulnerability in SPNEGO Extended Negotiation (NEGOEX) Security Mechanism.
SPNEGO,

, ,
https://thehackernews.com/2022/12/microsoft-reclassifies-spnego-extended.html

Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims

Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims,

A previously undocumented Android malware campaign has been observed leveraging money-lending apps to blackmail victims into paying up with personal information stolen from their devices.
Mobile security company Zimperium dubbed the activity MoneyMonger, pointing out the use of the cross-platform Flutter framework to develop the apps.
MoneyMonger « takes advantage of Flutter’s framework to

,

A previously undocumented Android malware campaign has been observed leveraging money-lending apps to blackmail victims into paying up with personal information stolen from their devices.
Mobile security company Zimperium dubbed the activity MoneyMonger, pointing out the use of the cross-platform Flutter framework to develop the apps.
MoneyMonger « takes advantage of Flutter’s framework to

, ,
https://thehackernews.com/2022/12/android-malware-campaign-leverages.html