Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking

Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking,

Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain unauthenticated remote code execution with the highest privileges.
The issues reside in TOS, an abbreviation for TerraMaster Operating System, and « can grant unauthenticated attackers access to the victim’s box simply by knowing the IP

,

Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain unauthenticated remote code execution with the highest privileges.
The issues reside in TOS, an abbreviation for TerraMaster Operating System, and « can grant unauthenticated attackers access to the victim’s box simply by knowing the IP

, ,
https://thehackernews.com/2022/03/critical-bugs-in-terramaster-tos-could.html

Understanding How Hackers Recon

Understanding How Hackers Recon,

Cyber-attacks keep increasing and evolving but, regardless of the degree of complexity used by hackers to gain access, get a foothold, cloak their malware, execute their payload or exfiltrate data, their attack will begin with reconnaissance. They will do their utmost to uncover exposed assets and probe their target’s attack surface for gaps that can be used as entry points.
So, the first line

,

Cyber-attacks keep increasing and evolving but, regardless of the degree of complexity used by hackers to gain access, get a foothold, cloak their malware, execute their payload or exfiltrate data, their attack will begin with reconnaissance. They will do their utmost to uncover exposed assets and probe their target’s attack surface for gaps that can be used as entry points.
So, the first line

, ,
https://thehackernews.com/2022/03/understanding-how-hackers-recon.html

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts,

Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing sensitive information.
The agency cautioned that the emails arrive with the subject line « Увага » (meaning « Attention ») and claim to be from a

,

Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing sensitive information.
The agency cautioned that the emails arrive with the subject line « Увага » (meaning « Attention ») and claim to be from a

, ,
https://thehackernews.com/2022/03/ukrainian-cert-warns-citizens-of.html

Un cheval de Troie a été découvert sur le Play Store… dans une application antivirus

Un cheval de Troie a été découvert sur le Play Store… dans une application antivirus,

Le malware SharkBot de l’application Antivirus Super Cleaner peut voler vos identifiants bancaires et effectuer des transferts d’argent à votre place.

,

Le malware SharkBot de l’application Antivirus Super Cleaner peut voler vos identifiants bancaires et effectuer des transferts d’argent à votre place.

, ,
https://www.01net.com/actualites/un-cheval-de-troie-a-ete-decouvert-sur-le-play-store-dans-une-application-antivirus-2055374.html

Mozilla corrige deux failles zero-day dans Firefox, il est urgent de mettre à jour le navigateur

Mozilla corrige deux failles zero-day dans Firefox, il est urgent de mettre à jour le navigateur,

Ces failles critiques permettent d’exécuter du code arbitraire et sont d’ores et déjà utilisées de manière active par des pirates.

,

Ces failles critiques permettent d’exécuter du code arbitraire et sont d’ores et déjà utilisées de manière active par des pirates.

, ,
https://www.01net.com/actualites/mozilla-corrige-deux-failles-zero-day-dans-firefox-il-est-urgent-de-mettre-a-jour-le-navigateur-2055364.html

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store,

The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to a category of financial trojans capable of siphoning credentials to initiate money transfers from compromised devices by circumventing

,

The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to a category of financial trojans capable of siphoning credentials to initiate money transfers from compromised devices by circumventing

, ,
https://thehackernews.com/2022/03/sharkbot-banking-malware-spreading-via.html

Des hackers ont piraté des organismes de recherche spatiale russes

Des hackers ont piraté des organismes de recherche spatiale russes,

Des pirates ont défacé un site Web de l’Institut de recherche spatiale, et publié des documents de l’agence spatiale Roscosmos.

,

Des pirates ont défacé un site Web de l’Institut de recherche spatiale, et publié des documents de l’agence spatiale Roscosmos.

, ,
https://www.01net.com/actualites/des-hackers-ont-pirate-des-organismes-de-recherche-spatiale-russes-2055332.html

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!,

Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the

,

Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the

, ,
https://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html

New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container

New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container,

Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel feature called control groups, also referred to as cgroups version 1 (v1), which allows processes to be organized into hierarchical groups,

,

Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel feature called control groups, also referred to as cgroups version 1 (v1), which allows processes to be organized into hierarchical groups,

, ,
https://thehackernews.com/2022/03/new-linux-kernel-cgroups-vulnerability.html

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks,

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
« While ransom DDoS attacks are not new, they appear to be evolving and becoming more interesting with time and with each new phase, » Nelli Klepfish, security analyst at Imperva, said. « For

,

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
« While ransom DDoS attacks are not new, they appear to be evolving and becoming more interesting with time and with each new phase, » Nelli Klepfish, security analyst at Imperva, said. « For

, ,
https://thehackernews.com/2022/03/imperva-thwarts-25-million-rps-ransom.html