Common Security Misconfigurations and Their Consequences

The Hacker News Daily Updates [Newsletter]( [cover]( [The Deep and Dark Web Guide]( Stay safe on the hidden web. [Download Now]( Sponsored LATEST NEWS Dec 22, 2020 [A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says]( As the probe into the SolarWinds supply chain attack continues, new digital forensic evidence has brought to light that a separate threat actor may have been abusing the IT infrastructure provider's Orion software to drop a similar persistent backdoor on target systems. "The investigation of the ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices]( A team of researchers today unveils two critical security vulnerabilities it discovered in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Common Security Misconfigurations and Their Consequences]( Everyone makes mistakes. That one sentence was drummed into me in my very first job in tech, and it has held true since then. In the cybersecurity world, misconfigurations can create exploitable issues that can haunt us later - so let's look at a few common security misconfigurations. The first one ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [iPhones of 36 Journalists Hacked Using iMessage Zero-Click Exploit]( Three dozen journalists working for Al Jazeera had their iPhones stealthily compromised via a zero-click exploit to install spyware as part of a Middle East cyberespionage campaign. In a new report published yesterday by University of Toronto's Citizen Lab, researchers said personal phones of 36 ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack]( The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication, and impact than previously thought. News of ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [cover]( [The Deep and Dark Web Guide]( Stay safe on the hidden web. [Download Now]( Sponsored This email was sent to {EMAIL}. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please [click here](. Contact The Hacker News: info@thehackernews.com [Unsubscribe]( The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India