InfoSec News

From The Hacker News – 8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server.
“The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware code to run solely in memory and avoid disk-based detection mechanisms,” Trend Micro researchers Ahmed

1 Minute
InfoSec News

From The Hacker News – Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

The modern kill chain is eluding enterprises because they aren’t protecting the infrastructure of modern business: SaaS. 
SaaS continues to dominate software adoption, and it accounts for the greatest share of public cloud spending. But enterprises and SMBs alike haven’t revised their security programs or adopted security tooling built for SaaS. 
Security teams keep jamming on-prem

1 Minute
InfoSec News

From The Hacker News – New SnailLoad Attack Exploits Network Latency to Spy on Users’ Web Activities

A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user’s web activity.
“SnailLoad exploits a bottleneck present on all Internet connections,” the researchers said in a study released this week.
“This bottleneck influences the latency of network packets, allowing an attacker

1 Minute