First Hackers News

Latest cybersecurity news, real attacks, and practical IOCs—made simple and actionable.

Malware

Chinese Hackers Using Stolen Ivacy VPN Certificate To Sign Malware warning-cybersecurity-types-of-cyber-attacks

warning-cybersecurity-types-of-cyber-attacks

Chinese Hackers Using Stolen Ivacy VPN Certificate To Sign Malware

FHN August 22, 2023

The Bronze Starlight hacking group has ingeniously employed a legitimate Ivacy VPN code-signing certificate to focus on...

Researchers Detect Vulnerabilities in PowerShell Gallery Enabling Supply Chain Attacks Vulnerabilities and Exploits

Vulnerabilities and Exploits

Researchers Detect Vulnerabilities in PowerShell Gallery Enabling Supply Chain Attacks

FHN August 17, 2023

Malicious actors could exploit existing vulnerabilities within the PowerShell Gallery to execute supply chain attacks targeting users...

QakBot Malware Operators Ramp Up C2 Network with 15 New Servers Qakbot_blog_new

Qakbot_blog_new

QakBot Malware Operators Ramp Up C2 Network with 15 New Servers

FHN August 8, 2023

As of late June 2023, the QakBot (aka QBot) malware operators have established 15 new command-and-control (C2)...

“Critical Remote Code Execution (RCE) Vulnerability (CVE-2023-39143) in PaperCut Application Servers” papercut-650

papercut-650

“Critical Remote Code Execution (RCE) Vulnerability (CVE-2023-39143) in PaperCut Application Servers”

FHN August 8, 2023

PaperCut NG and PaperCut MF are widely adopted software solutions for managing print services on servers. CVE-2023-39143...

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation unlocked-lock-1

unlocked-lock-1

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation

FHN August 7, 2023

Microsoft addressed a critical vulnerability in its Power Platform after criticism for a delayed response. Tenable reported...