The Hacker News2 時間
Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks
Microsoft launches inline data protection in Edge, preventing data leaks in GenAI apps and boosting enterprise security.
The Hacker News7 時間
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware
Ransomware in VSCode extensions triggers PowerShell payload to encrypt test files; developers warned to strengthen security.
The Hacker News4 時間
VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics
VanHelsing RaaS launched March 7, 2025 with 3 victims using a $5,000 deposit model, expanding cyber threats across multiple ...
The Hacker News9 時間
Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks
Next.js flaw CVE-2025-29927 bypasses authorization checks in versions 12.3.5 to 15.2.3, risking admin page access.
The Hacker News12 時間
The Surprising Gap in DDoS Protections: How Attackers Continue to Exploit DDoS Vulnerabilities
DDoS vulnerabilities are hidden within all DDoS protection solutions – i.e., they are mostly located in the security policies ...
The Hacker News1 日
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD ...
CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking ...
The Hacker News1 日
U.S. Treasury Lifts Tornado Cash Sanctions Amid North Korea Money Laundering Probe
U.S. Treasury lifts Tornado Cash sanctions after Fifth Circuit ruling, removing 100+ ETH wallets to bolster digital asset ...
The Hacker News2 日
China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families
China-linked APT Aquatic Panda targeted 7 organizations in a 10-month espionage campaign using five malware families.
The Hacker News6 日
Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year
Unpatched Edimax IC-7100 flaw (CVE-2025-1316) exploited for Mirai botnet malware since May 2024, enabling DDoS attacks via ...
The Hacker News2 日
Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates
Medusa ransomware uses ABYSSWORKER driver with stolen certificates to disable EDR and enable RDP access, risking data ...
The Hacker News3 日
UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools
UAT-5918 has attacked Taiwan infrastructure since 2023 using web shells and open-source tools to steal credentials.
The Hacker News3 日
10 Critical Network Pentest Findings IT Teams Overlook
PenTest’s 10,000+ pentests reveal exploitable network gaps from misconfigurations and weak passwords, driving continuous ...