The Hacker News

Hackers are targeting the construction sector by brute-forcing their way into FOUNDATION Accounting Software, leveraging default credentials. With access to MS SQL Server via port 4243, attackers are exploiting weak security measures. Details: https://thehackernews.com/2024/09/hackers-exploit-default-credentials-in.html

⚠️ SambaSpy, a new multifunctional RAT, targets Italian users in a phishing campaign by suspected Brazilian attackers. This malware can control everything from file systems to webcams, making it a powerful tool for cybercriminals. Details: https://thehackernews.com/2024/09/new-brazilian-linked-sambaspy-malware.html

Explore the growing threat of cyberattacks on healthcare, where poor cybersecurity hygiene risks patient safety. Learn how ransomware halts critical care and strategies to improve healthcare cybersecurity and prevent breaches. Read: https://thehackernews.com/2024/09/healthcares-diagnosis-is-critical-cure.html

🚨 Cryptojacking Alert: TeamTNT is back, targeting CentOS-based VPS servers! Their cryptojacking attacks steal resources, disable security features (SELinux, AppArmor), delete logs, and hide via the Diamorphine rootkit. Details: https://thehackernews.com/2024/09/new-teamtnt-cryptojacking-campaign.html Secure your systems now

Microsoft warns of a new ransomware strain, INC, being used by financially motivated threat actor "Vanilla Tempest" to attack the U.S. healthcare sector. Learn more: https://thehackernews.com/2024/09/microsoft-warns-of-new-inc-ransomware.html If you’re working in cybersecurity, particularly in healthcare, stay informed.

⚠️ GitLab has released urgent patches for a critical CVSS 10.0 #vulnerability in both CE and EE versions, targeting a flaw in the ruby-saml library that could enable an authentication bypass. Read details here & act fast: https://thehackernews.com/2024/09/gitlab-patches-critical-saml.html

🛑 Researchers have uncovered "Raptor Train," a botnet of over 200,000 compromised IoT devices, powered by a Chinese nation-state actor, Flax Typhoon. Learn more: https://thehackernews.com/2024/09/new-raptor-train-iot-botnet-compromises.html

A Chinese engineer has been indicted for spear-phishing NASA and major universities in a multi-year cyberattack targeting aerospace software. Read: https://thehackernews.com/2024/09/chinese-engineer-charged-in-us-for.html

Pentesting is now automated—more affordable and efficient than traditional methods. Daily security checks at a fraction of the cost make strong cybersecurity accessible to all. Is your org ready for automated PT? Read: https://thehackernews.com/2024/09/why-pay-pentester.html

North Korean cyber-espionage group UNC2970 is now targeting aerospace and energy sectors using job-themed phishing lures to deliver a new backdoor, MISTPEN. Learn more about the techniques: https://thehackernews.com/2024/09/north-korean-hackers-target-energy-and.html