Chinese Hackers Infected Nearly 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit-Protected CryptoCurrency Mining Malware

https://thehackernews.com/2019/05/hacking-mysql-phpmyadmin.html

Thanks to Weak Login Credentials.

Top 5 Last-Minute Memorial Day Deals at THN Store → Get 60% Extra OFF

Memorial Day has come and gone, but you still have time to land some of the best deals on some of the best apps and tech training bundles around.

https://thehackernews.com/2019/05/memorial-day-deals.html

Watch Out! POS Malware Found Installed On 103 Checkers and Rally's Drive-in Restaurants—Hackers Stole Customers' Credit Cards Details

https://thehackernews.com/2019/05/credit-card-checkers-restaurants.html

Important Update.

Read more: https://twitter.com/TheHackersNews/status/1134442673756987392?s=19

Unpatched Flaw in SUPRA Smart TVs Lets Attackers Hijack Screens With Any Video

https://thehackernews.com/2019/06/supra-smart-tv-hack.html

Newly Disclosed #0Day Flaw in Apple's macOS Mojave Lets Hackers Bypass Security and Privacy Protection Features with Synthetic Clicks…. Again!

https://thehackernews.com/2019/06/macOS-synthetic-click.html

Apple Launches Privacy-Focused "Sign in with Apple ID" Feature at #WWDC19

https://thehackernews.com/2019/06/apple-launches-privacy-focused-sign-in.html

It has been designed to prevent users' tracking by hiding their actual email addresses and randomly generate a new unique email address for each different 3rd-party service.

Firefox Web Browser Now Blocks Third-Party Tracking Cookies By Default

https://thehackernews.com/2019/06/firefox-tracking-cookies.html

➦ Enhanced Tracking Protection
➦ Firefox Lockwise [Desktop Extension]
➦ Facebook Container Extension Update

New Unpatched Bug Could Allow Client-Side Attackers to Bypass Windows Lock Screen On RDP Sessions

Read more — https://thehackernews.com/2019/06/rdp-windows-lock-screen.html

All the attacker needs to do is… interrupt the network connectivity of a targeted client system and Tadaaaa...! the lock screen will disappear

Critical security vulnerabilities found in Ministra IPTV Software that’s currently widely being used by over 1000 Online Streaming Services to manage their millions of subscribers worldwide.

https://thehackernews.com/2019/06/iptv-software-hacking.html

➦ Authentication Bypass
➦ SQL Injection
➦ Object Injection

Chaining them together allows remote attackers to execute commands on a targeted server, extract subscribers’ data, their financial details and stream any content of their choice.

This may sound weird but it's true...

Cryptocurrency firm Komodo itself hacked many of its customers' Agama wallets and unauthorisedly transferred all funds to a safe wallet before hackers could steal them.

Read more: https://thehackernews.com/2019/06/komodo-agama-wallet-hacking.html

A New Gradually Escalating Botnet Campaign Targeting Over 1.5 Million RDP Servers via Distributed Brute Force Attacks

https://thehackernews.com/2019/06/windows-rdp-brute-force.html

Hacker going by the name of SandboxEscaper today discloses a second zero-day exploit that apparently bypasses Microsoft's patch for a Windows EoP vulnerability (CVE-2019-0841)

https://thehackernews.com/2019/06/windows-eop-exploit.html

Beware ⚠️

Your Linux System Can Get Hacked Just by Opening an Innocent Looking Text File With "Vim" or "Neovim" Editor

Read More — https://thehackernews.com/2019/06/linux-vim-vulnerability.html

A new security flaw (CVE-2019-12498) in one of a popular Live Chat Plugin for WordPress sites allows unauthorized remote attackers to steal chat logs and manipulate sessions.

https://thehackernews.com/2019/06/wordpress-live-chat-plugin.html

Over 50,000 businesses use this plugin to provide online customer support.

It's June 2019 Patch Tuesday Week ⭐

Adobe has just released critical security patches for ColdFusion, Flash Player and Adobe Campaign Classic software

Read more — https://thehackernews.com/2019/06/adobe-patch-june.html

Microsoft Releases June 2019 Windows Security Updates to Patch 88 Vulnerabilities

Read more — https://thehackernews.com/2019/06/windows-june-updates.html

➡️ 21 Critical in Severity
➡️ 66 Important (4 Publicly Disclosed)
➡️ 01 Rated Moderate

RAMBleed Attack – Researchers demonstrated a new side-channel attack (CVE-2019-0174) to steal sensitive data from the device memory without actually accessing it.

RAMBleed is based on a well-known class of DRAM Rowhammer attacks; but instead of writing, it allows attackers to read bits from the adjacent rows.

Researchers demonstrated their finding with an attack against OpenSSH 7.9 and extracted an RSA-2048 key from the memory.

Read more: https://thehackernews.com/2019/06/rambleed-dram-attack.html

How fast can you tell if you’re protected? Whether it’s Robbinhood or Ryuk, testing your security controls against a specific threat can be a major showstopper.

Here are your options for checking their effectiveness against clear and present danger — https://thehackernews.com/2019/06/breach-attack-simulation.html

Telegram CEO says the 'Powerful DDoS Attack' it suffered yesterday was 'mostly from China,' suggesting that Beijing might have tried to disrupt protests in Hong Kong

https://thehackernews.com/2019/06/telegram-ddos-attack.html