Source
The Hacker News
An unpatched design flaw in the implementation of Microsoft Exchange's Autodiscover protocol has resulted in the leak of approximately 100,000 login names and passwords for Windows domains worldwide. "This is a severe security issue, since if an attacker can control such domains or has the ability to 'sniff' traffic in the same network, they can capture domain credentials in plain text (HTTP<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/nI_vQihlxnA" height="1" width="1" alt=""/>
An "insidious" new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of an ongoing campaign that uses SMS text message lures related to COVID-19 regulations and vaccine information in an attempt to steal personal and financial data. Proofpoint's messaging security subsidiary Cloudmark coined the emerging malware "TangleBot." <!--adsense--> "The<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/onZZ-BuixwQ" height="1" width="1" alt=""/>
Sysadmins know what the risks are of running unpatched services. Given the choice, and unlimited resources, most hardworking administrators will ensure that all systems and services are patched consistently. But things are rarely that simple. Technical resources are limited, and patching can often be more complicated than it appears at first glance. Worse, some services are so hidden in the<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/Q0tJHjYUBvY" height="1" width="1" alt=""/>
More than one terabyte of data containing 5.5 million files has been left exposed, leaking personal information of over 100,000 customers of a Colombian real estate firm, according to cybersecurity company WizCase. The breach was discovered by Ata Hakçıl and his team in a database owned by Coninsa Ramon H, a company that specializes in architecture, engineering, construction, and real estate<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/wX0ySGIpjl0" height="1" width="1" alt=""/>
As many as 11 security vulnerabilities have been disclosed in Nagios network management systems, some of which could be chained to achieve pre-authenticated remote code execution with the highest privileges, as well as lead to credential theft and phishing attacks. Industrial cybersecurity firm Claroty, which discovered the flaws, said flaws in tools such as Nagios make them an attractive<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/xeFHS3DnjBY" height="1" width="1" alt=""/>
Microsoft has opened the lid on a large-scale phishing-as-a-service (PHaaS) operation that's involved in selling phishing kits and email templates as well as providing hosting and automated services at a low cost, thus enabling cyber actors to purchase phishing campaigns and deploy them with minimal efforts. "With over 100 available phishing templates that mimic known brands and services, the<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/oor8QBAgjtY" height="1" width="1" alt=""/>
One of the determining factors of how much damage a cyber-attack cause is how fast organizations can respond to it. Time to response is critical for security teams, and it is a major hurdle for leaner teams. To help improve this metric and enhance organizations’ ability to respond to attacks quickly, many endpoint detection and response (EDR) and extended detection and response (XDR) vendors<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/ksXg3mvAbC0" height="1" width="1" alt=""/>
The U.S. Treasury Department on Tuesday imposed sanctions on Russian cryptocurrency exchange Suex for helping facilitate and launder transactions from at least eight ransomware variants as part of the government's efforts to crack down on a surge in ransomware incidents and make it difficult for bad actors to profit from such attacks using digital currencies. "Virtual currency exchanges such as<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/lEF7-AJSuc0" height="1" width="1" alt=""/>
Over the last several years, there have been numerous high-profile security breaches. These breaches have underscored the fact that traditional cyber defenses have become woefully inadequate and that stronger defenses are needed. As such, many organizations have transitioned toward a zero trust security model. A zero trust security model is based on the idea that no IT resource should be trusted<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/TD8dPwSf7Ds" height="1" width="1" alt=""/>
VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker could exploit to take control of an affected system. The most urgent among them is an arbitrary file upload vulnerability in the Analytics service (CVE-2021-22005) that impacts vCenter Server 6.7 and 7.0 deployments. "A malicious actor with<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/r8ZzAQq3YU4" height="1" width="1" alt=""/>