Malware authors can use these 2 new tactics to bypass the anti-ransomware defenses offered by popular antivirus programs and disable their real-time protection.

Learn more about the "Cut-and-Mouse" and "Ghost Control" attacks: https://thehackernews.com/2021/06/malware-can-use-this-trick-to-bypass.html

The U.S. Department of Justice has seized two domain names used by SolarWinds hackers in a recent cyber espionage campaign targeting government agencies, think tanks, and humanitarian groups.

Read details: https://thehackernews.com/2021/06/us-seizes-domains-used-by-solarwinds.html

Be careful. Attackers are actively exploiting an unpatched zero-day vulnerability in a premium e-commerce plugin for WordPress installed on more than 17,000 websites.

Read details: https://thehackernews.com/2021/06/hackers-actively-exploiting-0-day-in.html

Researchers uncover North Korean Windows and Android espionage campaigns targeting South Korean government entities.

Read: https://thehackernews.com/2021/06/researchers-uncover-hacking-operations.html

A top Russian-language underground cybercrime forum has been asking its community to submit "unorthodox" ways to perpetrate cryptocurrency attacks in exchange for a $115,000 prize.

https://thehackernews.com/2021/06/cybercriminals-hold-115000-prize.html

Researchers have revealed yet another Chinese cyberespionage campaign, this time targeting a Southeast Asian government via a new backdoor that enables hackers to remotely take screenshots, edit files, and run commands.

Read: https://thehackernews.com/2021/06/experts-uncover-yet-another-chinese.html

A new set of critical vulnerabilities has been disclosed in the Realtek RTL8170C Wi-Fi module that could be abused by an attacker to gain elevated privileges on a device and hijack wireless communications.

Read: https://thehackernews.com/2021/06/researchers-warn-of-critical-bugs.html

Necro Python malware has been enhanced with new exploits for more than 10 different web apps and the SMB protocol, as well as Tezos cryptocurrency mining capabilities.

Read: https://thehackernews.com/2021/06/necro-python-malware-upgrades-with-new.html

Google is going to update the Chrome browser with an improved version of the "Enhanced Safe-Browsing" feature to detect untrusted extensions and suspicious downloads.

Read: https://thehackernews.com/2021/06/google-chrome-to-help-users-identify.html

With the new privacy enhancements, Google will allow Android users to opt-out of Advertising ID-based personalized advertising so that ads can not track them across apps.

https://thehackernews.com/2021/06/google-to-let-android-users-opt-out-to.html

ALERT — Cybercriminals are actively scanning the Internet for VMware vCenter servers that have not yet been patched against a recently disclosed critical RCE vulnerability.

(CVE-2021-21985 / CVSS score 9.8)
https://thehackernews.com/2021/06/alert-critical-rce-bug-in-vmware.html

Taking you from the basics to high-level hacking, bug hunting & penetration testing techniques used by professionals, this training bundle offers 1,686 tutorials that are ideal for beginners.

Access 18 online training courses for just $43 https://thehackernews.com/2021/06/break-into-ethical-hacking-with-18.html

[New] 🔥 GitHub has updated its platform policy to remove exploit code when used as "malware CDN" in active cyberattacks.

Read details: https://thehackernews.com/2021/06/github-updates-policy-to-remove-exploit.html

US authorities have charged a Latvian woman for her alleged role as a programmer in a cybercrime ring that developed and deployed the TrickBot banking malware.

Details: https://thehackernews.com/2021/06/latvian-woman-charged-for-her-role-in.html

Security researchers have discovered the first known malware, dubbed Siloscope," targeting Windows Server containers to infect Kubernetes clusters in cloud environments.

Details: https://thehackernews.com/2021/06/researchers-discover-first-known.html

U.S. authorities have recovered 63.7 out of 75 Bitcoins — worth about $4.4 million — paid to the DarkSide ransomware extortionists by Colonial Pipeline.

Details: https://thehackernews.com/2021/06/us-recovers-23-million-ransom-paid-to.html

Here are the top 10 privacy and security features Apple announced for iOS and macOS at WWDC2021

Read: https://thehackernews.com/2021/06/top-10-privacy-and-security-features.html

Researchers are warning of four vulnerabilities in #Microsoft's Office suite—one of which will be patched today—that hackers can exploit in Word and Excel documents to inject malicious code.

Details: https://thehackernews.com/2021/06/new-uaf-vulnerability-affecting.html

For nearly 3 years, the FBI and AFP secretly operated a fake encrypted chat service to intercept 27 million messages b/w criminals & arrest over 800 of them—and seized 55 luxury vehicles, 8 tons of cocaine, 250 firearms and over $48 million cash.

https://thehackernews.com/2021/06/feds-secretly-ran-fake-encrypted-chat.html

Microsoft has released new security updates for Windows operating systems and other supported software, addressing 50 vulnerabilities, including 6 ZERO-DAY flaws reported to be under active cyberattack.


https://thehackernews.com/2021/06/update-your-windows-computers-to-patch.html