#backdoor

Plus: The US warns of a mysterious military contractor breach, a "poisoned" version of the Tor Browser is tracking Chinese users, and more.

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution.

The group has been operating for over a year, promoting their tools in hacking forums, stealing credit card information, and using typosquatting techniques to target open source software flaws.

Multiple campaigns that distributed trojanized and typosquatted packages on the NPM open source repository have been identified as the work of a single threat actor dubbed LofyGang. Checkmarx said it discovered 199 rogue packages totaling thousands of installations, with the group operating for over a year with the goal of stealing credit card data as well as user accounts associated with

Categories: News Tags: Microsoft SQL Tags: brute force Tags: Maggie Tags: Extended Stored Procedure Researchers have found a backdoor that specifically targets Microsoft SQL servers. (Read more...) The post Hundreds of Microsoft SQL servers found to be backdoored appeared first on Malwarebytes Labs.

By Waqas RatMilad can perform a wide range of malicious actions including file manipulation, audio recording, and application permission modification. This is a post from HackRead.com Read the original post: Iranian Hackers Spreading RatMilad Android Spyware Disguised as VPN App

Categories: News Tags: malware Tags: ZINC Tags: microsoft Tags: infection Tags: open source Tags: job offer Tags: fake Tags: LinkedIn A North Korean ZINC group is accused of creating compromised versions of KiTTY, PuTTY, TightVNC, and other popular open-source software apps (Read more...) The post Bogus job offers hide trojanised open-source software appeared first on Malwarebytes Labs.

Argument injection bug posed RCE risk

U.S. cybersecurity and intelligence agencies on Tuesday disclosed that multiple nation-state hacking groups potentially targeted a "Defense Industrial Base (DIB) Sector organization's enterprise network" as part of a cyber espionage campaign. "[Advanced persistent threat] actors used an open-source toolkit called Impacket to gain their foothold within the environment and further compromise the

Researchers have disclosed details about a now-patched high-severity security flaw in Packagist, a PHP software package repository, that could have been exploited to mount software supply chain attacks. "This vulnerability allows gaining control of Packagist," SonarSource researcher Thomas Chauchefoin said in a report shared with The Hacker News. Packagist is used by the PHP package manager