The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to [email protected]
- New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Databy [email protected] (The Hacker News) on 30 May 2025 at 2:14 pm
A new malware campaign is distributing a novel Rust-based information stealer dubbed EDDIESTEALER using the popular ClickFix social engineering tactic initiated via fake CAPTCHA verification pages. "This campaign leverages deceptive CAPTCHA verification pages that trick users into executing a malicious PowerShell script, which ultimately deploys the infostealer, harvesting sensitive data such as
- China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazilby [email protected] (The Hacker News) on 30 May 2025 at 11:12 am
The China-linked threat actor behind the recent in-the-wild exploitation of a critical security flaw in SAP NetWeaver has been attributed to a broader set of attacks targeting organizations in Brazil, India, and Southeast Asia since 2023. "The threat actor mainly targets the SQL injection vulnerabilities discovered on web applications to access the SQL servers of targeted organizations," Trend
- From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Careby [email protected] (The Hacker News) on 30 May 2025 at 10:30 am
Breaking Out of the Security Mosh Pit When Jason Elrod, CISO of MultiCare Health System, describes legacy healthcare IT environments, he doesn't mince words: "Healthcare loves to walk backwards into the future. And this is how we got here, because there are a lot of things that we could have prepared for that we didn't, because we were so concentrated on where we were." This chaotic approach has
- U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraudby [email protected] (The Hacker News) on 30 May 2025 at 7:51 am
The U.S. Department of Treasury's Office of Foreign Assets Control (OFAC) has levied sanctions against a Philippines-based company named Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure to conduct romance baiting scams that led to massive cryptocurrency losses. The Treasury accused the Taguig-headquartered company of enabling thousands of websites involved in
- ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breachby [email protected] (The Hacker News) on 30 May 2025 at 6:11 am
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. "ConnectWise recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation-state actor, which affected a very small number of ScreenConnect