First Hackers News

Latest cybersecurity news, real attacks, and practical IOCs—made simple and actionable.

Malicious extension

QakBot Malware Operators Ramp Up C2 Network with 15 New Servers Qakbot_blog_new

Qakbot_blog_new

QakBot Malware Operators Ramp Up C2 Network with 15 New Servers

FHN August 8, 2023

As of late June 2023, the QakBot (aka QBot) malware operators have established 15 new command-and-control (C2)...

“Critical Remote Code Execution (RCE) Vulnerability (CVE-2023-39143) in PaperCut Application Servers” papercut-650

papercut-650

“Critical Remote Code Execution (RCE) Vulnerability (CVE-2023-39143) in PaperCut Application Servers”

FHN August 8, 2023

PaperCut NG and PaperCut MF are widely adopted software solutions for managing print services on servers. CVE-2023-39143...

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation unlocked-lock-1

unlocked-lock-1

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation

FHN August 7, 2023

Microsoft addressed a critical vulnerability in its Power Platform after criticism for a delayed response. Tenable reported...

Malicious apps employ sneaky versioning techniques to evade detection by Google Play Store scanners. 1555478944_google_play_store_budgeting_story

1555478944_google_play_store_budgeting_story

Malicious apps employ sneaky versioning techniques to evade detection by Google Play Store scanners.

FHN August 4, 2023

Threat actors use versioning to bypass Google Play Store’s malware detection and target Android users. In its...

Lazarus: They hijack Microsoft’s IIS servers to distribute malware smartphone malware concept. 3d render.

smartphone malware concept. 3d render.

Lazarus: They hijack Microsoft’s IIS servers to distribute malware

FHN July 27, 2023

Lazarus, a state-backed North Korean hacker group, targets Windows Internet Information Service (IIS) web servers to use...