Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In

Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In,

India’s computer and emergency response team, CERT-In, on Thursday published new guidelines that require service providers, intermediaries, data centers, and government entities to compulsorily report cybersecurity incidents, including data breaches, within six hours.
« Any service provider, intermediary, data center, body corporate and Government organization shall mandatorily report cyber

,

India’s computer and emergency response team, CERT-In, on Thursday published new guidelines that require service providers, intermediaries, data centers, and government entities to compulsorily report cybersecurity incidents, including data breaches, within six hours.
« Any service provider, intermediary, data center, body corporate and Government organization shall mandatorily report cyber

, ,
https://thehackernews.com/2022/04/indian-govt-orders-organisations-to.html

Experts Detail 3 Hacking Teams Working Under the Umbrella of TA410 Group

Experts Detail 3 Hacking Teams Working Under the Umbrella of TA410 Group,

A cyberespionage threat actor known for targeting a variety of critical infrastructure sectors in Africa, the Middle East, and the U.S. has been observed using an upgraded version of a remote access trojan with information stealing capabilities.
Calling TA410 an umbrella group comprised of three teams dubbed FlowingFrog, LookingFrog and JollyFrog, Slovak cybersecurity firm ESET assessed that « 

,

A cyberespionage threat actor known for targeting a variety of critical infrastructure sectors in Africa, the Middle East, and the U.S. has been observed using an upgraded version of a remote access trojan with information stealing capabilities.
Calling TA410 an umbrella group comprised of three teams dubbed FlowingFrog, LookingFrog and JollyFrog, Slovak cybersecurity firm ESET assessed that « 

, ,
https://thehackernews.com/2022/04/experts-detail-3-hacking-teams-working.html

Everything you need to know to create a Vulnerability Assessment Report

Everything you need to know to create a Vulnerability Assessment Report,

You’ve been asked for a Vulnerability Assessment Report for your organisation and for some of you reading this article, your first thought is likely to be « What is that? »
Worry not. This article will answer that very question as well as why you need a Vulnerability Assessment Report and where you can get one from. 
As it’s likely the request for such a report came from an important source such

,

You’ve been asked for a Vulnerability Assessment Report for your organisation and for some of you reading this article, your first thought is likely to be « What is that? »
Worry not. This article will answer that very question as well as why you need a Vulnerability Assessment Report and where you can get one from. 
As it’s likely the request for such a report came from an important source such

, ,
https://thehackernews.com/2022/04/everything-you-need-to-know-to-create.html

Cybercriminals Using New Malware Loader ‘Bumblebee’ in the Wild

Cybercriminals Using New Malware Loader ‘Bumblebee’ in the Wild

,

Cybercriminal actors previously observed delivering BazaLoader and IcedID as part of their malware campaigns are said to have transitioned to a new loader called Bumblebee that’s under active development.
« Based on the timing of its appearance in the threat landscape and use by multiple cybercriminal groups, it is likely Bumblebee is, if not a direct replacement for BazaLoader, then a new,

,

Cybercriminal actors previously observed delivering BazaLoader and IcedID as part of their malware campaigns are said to have transitioned to a new loader called Bumblebee that’s under active development.
« Based on the timing of its appearance in the threat landscape and use by multiple cybercriminal groups, it is likely Bumblebee is, if not a direct replacement for BazaLoader, then a new,

, ,
https://thehackernews.com/2022/04/cybercriminals-using-new-malware-loader.html

Twitter’s New Owner Elon Musk Wants DMs to be End-to-End Encrypted like Signal

Twitter’s New Owner Elon Musk Wants DMs to be End-to-End Encrypted like Signal

,

Elon Musk, CEO of SpaceX and Tesla and Twitter’s new owner, on Thursday called on adding support for end-to-end encryption (E2EE) to the platform’s direct messages (DM) feature.
« Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages, » Musk said in a tweet.
The statement comes days after the microblogging service announced it officially entered into

,

Elon Musk, CEO of SpaceX and Tesla and Twitter’s new owner, on Thursday called on adding support for end-to-end encryption (E2EE) to the platform’s direct messages (DM) feature.
« Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages, » Musk said in a tweet.
The statement comes days after the microblogging service announced it officially entered into

, ,
https://thehackernews.com/2022/04/twitters-new-owner-elon-musk-wants-dms.html

New RIG Exploit Kit Campaign Infecting Victims’ PCs with RedLine Stealer

New RIG Exploit Kit Campaign Infecting Victims’ PCs with RedLine Stealer

,

A new campaign leveraging an exploit kit has been observed abusing an Internet Explorer flaw patched by Microsoft last year to deliver the RedLine Stealer trojan.
« When executed, RedLine Stealer performs recon against the target system (including username, hardware, browsers installed, anti-virus software) and then exfiltrates data (including passwords, saved credit cards, crypto wallets, VPN

,

A new campaign leveraging an exploit kit has been observed abusing an Internet Explorer flaw patched by Microsoft last year to deliver the RedLine Stealer trojan.
« When executed, RedLine Stealer performs recon against the target system (including username, hardware, browsers installed, anti-virus software) and then exfiltrates data (including passwords, saved credit cards, crypto wallets, VPN

, ,
https://thehackernews.com/2022/04/new-rig-exploit-kit-campaign-infecting.html

U.S Cybersecurity Agency Lists 2021’s Top 15 Most Exploited Software Vulnerabilities

U.S Cybersecurity Agency Lists 2021’s Top 15 Most Exploited Software Vulnerabilities

,

Log4Shell, ProxyShell, ProxyLogon, ZeroLogon, and flaws in Zoho ManageEngine AD SelfService Plus, Atlassian Confluence, and VMware vSphere Client emerged as some of the top exploited security vulnerabilities in 2021.
<!–adsense–>
That’s according to a « Top Routinely Exploited Vulnerabilities » report released by cybersecurity authorities from the Five Eyes nations Australia, Canada, New Zealand

,

Log4Shell, ProxyShell, ProxyLogon, ZeroLogon, and flaws in Zoho ManageEngine AD SelfService Plus, Atlassian Confluence, and VMware vSphere Client emerged as some of the top exploited security vulnerabilities in 2021.
<!–adsense–>
That’s according to a « Top Routinely Exploited Vulnerabilities » report released by cybersecurity authorities from the Five Eyes nations Australia, Canada, New Zealand

, ,
https://thehackernews.com/2022/04/us-cybersecurity-agency-lists-2021s-top.html

Des câbles sabotés provoquent des problèmes de connexion à Internet dans plusieurs villes de France

Des câbles sabotés provoquent des problèmes de connexion à Internet dans plusieurs villes de France,

Trois câbles français de liaison longue distance ont été coupés durant la nuit à des intervalles de temps rapprochés. Il s’agirait d’un « acte de malveillance coordonnée », particulièrement « grave » et « très rare ».

,

Trois câbles français de liaison longue distance ont été coupés durant la nuit à des intervalles de temps rapprochés. Il s’agirait d’un « acte de malveillance coordonnée », particulièrement « grave » et « très rare ».

, ,
https://www.01net.com/actualites/des-cables-sabotes-provoquent-des-problemes-de-connexion-a-internet-dans-plusieurs-villes-de-france-2056037.html

CloudFlare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second

CloudFlare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second,

Cloudflare on Wednesday disclosed that it acted to mitigate a 15.3 million request-per-second (RPS) distributed denial-of-service (DDoS) attack. The web infrastructure and website security company called it one of the « largest HTTPS DDoS attacks on record. » 
« HTTPS DDoS attacks are more expensive in terms of required computational resources because of the higher cost of establishing a secure TLS

,

Cloudflare on Wednesday disclosed that it acted to mitigate a 15.3 million request-per-second (RPS) distributed denial-of-service (DDoS) attack. The web infrastructure and website security company called it one of the « largest HTTPS DDoS attacks on record. » 
« HTTPS DDoS attacks are more expensive in terms of required computational resources because of the higher cost of establishing a secure TLS

, ,
https://thehackernews.com/2022/04/cloudflare-thwarts-record-ddos-attack.html

QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available

QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available,

Network-attached storage (NAS) appliance maker QNAP on Wednesday said it’s working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software.
Netatalk is an open-source implementation of the Apple Filing Protocol (AFP), allowing Unix-like operating systems to serve as file servers for Apple macOS computers.
<!-

,

Network-attached storage (NAS) appliance maker QNAP on Wednesday said it’s working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software.
Netatalk is an open-source implementation of the Apple Filing Protocol (AFP), allowing Unix-like operating systems to serve as file servers for Apple macOS computers.
<!-

, ,
https://thehackernews.com/2022/04/qnap-advises-to-mitigate-remote-hacking.html