Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks

The Hacker News Daily Updates [Newsletter]( [cover]( [Ultimate Guide to Connected Device Security]( Six steps to secure products and software supply chains [Download Now]( Sponsored LATEST NEWS Feb 22, 2023 [Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices]( Apple has revised the security advisories it released last month to include three new vulnerabilities impacting iOS, iPadOS, and macOS. The first flaw is a race condition in the Crash Reporter component (CVE-2023-23520) that could enable a malicious actor to read arbitrary files as root. The iPhone maker said it addressed the issue with additional validation. The two other ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links]( In what's a continuing assault on the open source ecosystem, over 15,000 spam packages have flooded the npm repository in an attempt to distribute phishing links. "The packages were created using automated processes, with project descriptions and auto-generated names that closely resembled one another," Checkmarx researcher Yehuda Gelb said in a Tuesday report. "The attackers referred to ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [3 Steps to Automate Your Third-Party Risk Management Program]( If you Google "third-party data breaches" you will find many recent reports of data breaches that were either caused by an attack at a third party or sensitive information stored at a third-party location was exposed. Third-party data breaches don't discriminate by industry because almost every company is operating with some sort of vendor relationship – whether it be a business ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Hydrochasma: New Threat Actor Targets Shipping Companies and Medical Labs in Asia]( Shipping companies and medical laboratories in Asia have been the subject of a suspected espionage campaign carried out by a never-before-seen threat actor dubbed Hydrochasma. The activity, which has been ongoing since October 2022, "relies exclusively on publicly available and living-off-the-land tools," Symantec, by Broadcom Software, said in a report shared with The Hacker News. There is ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks]( An open source command-and-control (C2) framework known as Havoc is being adopted by threat actors as an alternative to other well-known legitimate toolkits like Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said it observed a new campaign in the beginning of January 2023 targeting an unnamed government organization that utilized Havoc. "While C2 frameworks are prolific, ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Gcore Thwarts Massive 650 Gbps DDoS Attack on Free Plan Client]( At the beginning of January, Gcore faced an incident involving several L3/L4 DDoS attacks with a peak volume of 650 Gbps. Attackers exploited over 2000 servers belonging to one of the top three cloud providers worldwide and targeted a client who was using a free CDN plan. However, due to Gcore’s distribution of infrastructure and a large number of peering partners, the attacks were ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog]( The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 (CVSS score: 9.8) - IBM Aspera Faspex Code Execution Vulnerability CVE-2022-41223 (CVSS score: 6.8) - Mitel MiVoice Connect Code ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [VMware Patches Critical Vulnerability in Carbon Black App Control Product]( VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product. Tracked as CVE-2023-20858, the shortcoming carries a CVSS score of 9.1 out of a maximum of 10 and impacts App Control versions 8.7.x, 8.8.x, and 8.9.x. The virtualization services provider describes the issue as an injection vulnerability. Security researcher ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [cover]( [Ultimate Guide to Connected Device Security]( Six steps to secure products and software supply chains [Download Now]( Sponsored This email was sent to {EMAIL}. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please [click here](. Contact The Hacker News: info@thehackernews.com [Unsubscribe]( The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India