Security News

Price Drop: This Complete Ethical Hacking Bundle is Now $35
2025-02-04 18:00

Get a comprehensive, potentially lucrative ethical hacking education with 18 courses on today's top tools and tech. This bundle is just $34.97 for a limited time.

Chinese cyberspies use new SSH backdoor in network device hacks
2025-02-04 17:39

A Chinese hacking group is hijacking the SSH daemon on network appliances by injecting malware into the process for persistent access and covert operations. [...]

Poisoned Go programming language package lay undetected for 3 years
2025-02-04 17:28

Researcher says ecosystem's auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used...

Netgear warns users to patch critical WiFi router vulnerabilities
2025-02-04 16:33

Netgear has fixed two critical remote code execution and authentication bypass vulnerabilities affecting multiple WiFi routers and warned customers to update their devices to the latest firmware...

Grubhub serves up security incident with a side of needing to change your password
2025-02-04 15:30

Contact info and partial payment details may be compromised US food and grocery delivery platform Grubhub says a security incident at a third-party service provider is to blame after user data was...

California man steals $50 million using fake investment sites, gets 7 years
2025-02-04 15:05

A 59-year-old man from Irvine, California, was sentenced to 87 months in prison for his involvement in an investor fraud ring that stole $50 million between 2012 and October 2020. [...]

How hackers target your Active Directory with breached VPN passwords
2025-02-04 15:01

As the gateways to corporate networks, VPNs are an attractive target for attackers. Learn from Specops Software about how hackers use compromised VPN passwords and how you can protect your...

US accuses Canadian math prodigy of $65M crypto scheme
2025-02-04 14:45

Suspect, still at large, said to back concept that 'code is law' New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting...

7-Zip MotW bypass exploited in zero-day attacks against Ukraine
2025-02-04 14:43

A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by Russian hackers as a zero-day since September 2024. [...]

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
2025-02-04 14:16

Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to...