Palo Alto firewalls under attack as miscreants chain flaws for root access by LinuxBender

A flaw patched last week by Palo Alto Networks is now under active attack and, when chained with two older vulnerabilities, allows attackers to gain root access to affected systems. This story starts with CVE-2024-9474, a 6.9-rated privilege escalation vulnerability in Palo Alto Networks PAN-OS software that allowed an OS administrator with access to the

ByHackTechFebruary 19, 20250Comments

News

Judge Lets AT&T Off the Hook for SIM Swap Attack by SerCe

One early crypto investor’s hopes to see a major telecom provider pay up for a 2017 crypto heist have been all but dashed. Unsealed court documents filed last Thursday, the U.S. District Court for the Central District of California shared that AT&T wasn’t liable to any damages due to the 2017 SIM swap hack that

ByHackTechSeptember 17, 20230Comments

News

Why are no Royal Navy attack submarines at sea? by mellosouls

Through open-source observations, it is clear that none of the Royal Navy’s six commissioned SSNs are at sea at the time of writing. As part of normal maintenance cycles several boats could be expected to be in harbour but it is unusual for the entire force to be alongside. HMS Triumph recently returned to Devonport

ByHackTechAugust 30, 20230Comments

News

Ransomware Attack Disrupts Health Care in at Least Three States by mikece

U.S.|Ransomware Attack Disrupts Health Care Services in at Least Three Stateshttps://www.nytimes.com/2023/08/05/us/cyberattack-hospitals-california.htmlIt was not immediately clear how many locations operated by Prospect Medical Holdings were affected but some sites had to cut back services or close.Southern California Hospital at Hollywood is one of the hospitals that is part of Prospect Medical Holdings, which was hit by

ByHackTechAugust 6, 20231Comment

News

The zero-knowledge attack of the year might just have happened by rencrisa

Last week, a strange paper (by Wilson Nguyen et al.) came out: Revisiting the Nova Proof System on a Cycle of Curves. Its benign title might have escaped the attention of many, but within its pages lied one of the most impressive and devastating attack on a zero-knowledge proof (ZKP) system that we’ve ever seen.

ByHackTechJuly 4, 20230Comments

News

Use of NATO arms for attack in Russia raises doubts about Kyiv’s controls by lisasays

The Russian fighters aligned against Moscow who launched a cross-border raid from Ukraine into the Belgorod region of Russia last week used at least four tactical vehicles originally given to Ukraine by the United States and Poland, U.S. officials said, raising questions about the unintended use of NATO-provided equipment and Kyiv’s commitments to secure materiel

ByHackTechJune 4, 20232Comments

News

Bruteprint attack can cheaply unlock various fingerprint-secured phones by ashton314

BRUTEPRINT — BrutePrint requires just $15 of equipment and a little amount of time with a phone. Dan Goodin – May 22, 2023 10:31 pm UTC Getty Images Researchers have devised a low-cost smartphone attack that cracks the authentication fingerprint used to unlock the screen and perform other sensitive actions on a range of Android

ByHackTechMay 22, 20230Comments

News

A new ChatGPT Zero Day attack is undetectable data-stealing malware by gitgud

If you buy through affiliate links, we may receive a commission, helping support our product testing. Learn more. A few days ago, Europol warned that ChatGPT would help criminals improve how they target people online. Among the examples Europol offered was the creation of malware with the help of ChatGPT. The OpenAI generative AI tool

ByHackTechApril 10, 20230Comments

News

Free unlimited DDoS attack protection by Google by textread

Free unlimited DDoS attack protection by Google

ByHackTechMarch 29, 20230Comments

News

Ransomware attack severs 1k ships from their on-shore servers by LinuxBender

A Norwegian maritime risk management business is getting a lesson in that very area, after a ransomware attack forced its ShipManager software offline and left 1,000 ships without a connection to on-shore servers. DNV said the attack happened on January 7, and updated its report yesterday to say it involved ransomware – but affected vessels

ByHackTechJanuary 19, 20230Comments

Sign Up to Our Newsletter