Daily Newsletter

The Hacker News Daily Updates [Newsletter]( [cover]( [COVID-19 IT Response & Recovery Report]( Learn how IT professionals nationwide responded, repositioned and are rebuilding in light of COVID-19. [Download Now]( Sponsored LATEST NEWS Dec 29, 2020 [A Google Docs Bug Could Have Allowed Hackers See Your Private Documents]( Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website. The flaw was discovered on July 9 by security researcher Sreeram ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [AutoHotkey-Based Password Stealer Targeting US, Canadian Banking Users]( Threat actors have been discovered distributing a new credential stealer written in AutoHotkey (AHK) scripting language as part of an ongoing campaign that started early 2020. Customers of financial institutions in the US and Canada are among the primary targets for credential exfiltration, with a ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware]( An authentication bypass vulnerability in the SolarWinds Orion software may have been leveraged by adversaries as a zero-day to deploy the SUPERNOVA malware in target environments. According to an advisory published yesterday by the CERT Coordination Center, the SolarWinds Orion API that's used to ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Police Arrest 21 WeLeakInfo Customers Who Bought Breached Personal Data]( 21 people have been arrested across the UK as part of a nationwide cyber crackdown targeting customers of WeLeakInfo[.]com, a now-defunct online service that had been previously selling access to data hacked from other websites. The suspects used stolen personal credentials to commit further cyber ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers]( New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [cover]( [The SIEM Buyers Guide for 2020]( In 2020, security information event management (SIEM) solutions will be far more than an information platform, expanding to include compliance reporting and logs from firewalls and other devices, as well as User and Entity Behavior Analytics (UEBA) -- now considered an essential capability by Gartner. On top of that, the importance of a SIEM solution in today’s enterprise is magnified by the growing sophistication of attacks and the use of cloud services which only increases the attack surface. [Download Now]( Sponsored This email was sent to {EMAIL}. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please [click here](. Contact The Hacker News: info@thehackernews.com [Unsubscribe]( The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India