Royal Ransomware Threat Takes Aim at U.S. Healthcare System

The Hacker News Daily Updates [Newsletter]( [cover]( [The 5 Dimensions of Data Maturity]( Webinar [Download Now]( Sponsored LATEST NEWS Dec 12, 2022 [Top 4 SaaS Security Threats for 2023]( With 2022 coming to a close, there is no better time to buckle down and prepare to face the security challenges in the year to come. This past year has seen its fair share of breaches, attacks, and leaks, forcing organizations to scramble to protect their SaaS stacks. March alone saw three different breaches from Microsoft, Hubspot, and Okta. With SaaS sprawl ever growing and becoming ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Google Adds Passkey Support to Chrome for Windows, macOS and Android]( Google has officially begun rolling out support for passkeys, the next-generation passwordless login standard, to its stable version of Chrome web browser. "Passkeys are a significantly safer replacement for passwords and other phishable authentication factors," the tech giant's Ali Sarraf said. "They cannot be reused, don't leak in server breaches, and protect users from phishing attacks." ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Cryptocurrency Mining Campaign Hits Linux Users with Go-based CHAOS Malware]( A cryptocurrency mining attack targeting the Linux operating system also involved the use of an open source remote access trojan (RAT) dubbed CHAOS. The threat, which was spotted by Trend Micro in November 2022, remains virtually unchanged in all other aspects, including when it comes to terminating competing malware, security software, and deploying the Monero (XMR) cryptocurrency miner. ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Keep Your Grinch at Bay: Here's How to Stay Safe Online this Holiday Season]( As the holiday season approaches, online shopping and gift-giving are at the top of many people's to-do lists. But before you hit the "buy" button, it's important to remember that this time of year is also the peak season for cybercriminals. In fact, cybercriminals often ramp up their efforts during the holidays, taking advantage of the influx of online shoppers and the general hustle and ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Royal Ransomware Threat Takes Aim at U.S. Healthcare System]( The U.S. Department of Health and Human Services (HHS) has cautioned of ongoing Royal ransomware attacks targeting healthcare entities in the country. "While most of the known ransomware operators have performed Ransomware-as-a-Service, Royal appears to be a private group without any affiliates while maintaining financial motivation as their goal," the agency's Health Sector ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Hack-for-Hire Group Targets Travel and Financial Entities with New Janicab Malware Variant]( Travel agencies have emerged as the target of a hack-for-hire group dubbed Evilnum as part of a broader campaign aimed at legal and financial investment institutions in the Middle East and Europe. The attacks, which took place during 2020 and 2021 and likely went as far back as 2015, involved a revamped variant of a malware called Janicab that leverages a number of public services like ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Researchers Detail New Attack Method to Bypass Popular Web Application Firewalls]( A new attack method can be used to circumvent web application firewalls (WAFs) of various vendors and infiltrate systems, potentially enabling attackers to gain access to sensitive business and customer information. Web application firewalls are a key line of defense to help filter, monitor, and block HTTP(S) traffic to and from a web application, and safeguard against attacks such as ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Cisco Warns of High-Severity Unpatched Flaw Affecting IP Phones Firmware]( Cisco has released a new security advisory warning of a high-severity flaw affecting IP Phone 7800 and 8800 Series firmware that could be potentially exploited by an unauthenticated attacker to cause remote code execution or a denial-of-service (DoS) condition. The networking equipment major said it's working on a patch to address the vulnerability, which is tracked as CVE-2022-20968 (CVSS ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [cover]( [The 5 Dimensions of Data Maturity]( Webinar [Download Now]( Sponsored This email was sent to {EMAIL}. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please [click here](. Contact The Hacker News: info@thehackernews.com [Unsubscribe]( The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India