The Hacker News Daily Updates

Critical flaws reported in Move Virtual Machine.

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 22 October 2022, 1514 UTC.  Content supplied by email subscription to "The Hacker News:  Daily Updates."

Source:  https://mail.google.com/mail/u/0/?tab=rm&ogbl#inbox/FMfcgzGqRGXcTGmPJbJrkGndjCWRdVrQ

Please click link or scroll down to read your selections.

Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

The Hacker News Daily Updates

Moving Past Passwords (At Last!) 7 Key Takeaways to Passwordless Authentication Download Now Sponsored

LATEST NEWS Oct 22, 2022

Critical Flaw Reported in Move Virtual Machine Powering the Aptos Blockchain Network Researchers have disclosed details about a now-patched critical flaw in the Move virtual machine that powers the Aptos blockchain network. The vulnerability "can cause Aptos nodes to crash and cause denial of service," Singapore-based Numen Cyber Labs said in a technical write-up published earlier ... Read More

Emotet Botnet Distributing Self-Unlocking Password-Protected RAR Files to Drop Malware The notorious Emotet botnet has been linked to a new wave of malspam campaigns that take advantage of password-protected archive files to drop CoinMiner and Quasar RAT on compromised systems. In an attack chain detected by Trustwave SpiderLabs researchers, an invoice-themed ZIP file lure was found ... Read More

Multiple Campaigns Exploit VMware Vulnerability to Deploy Crypto Miners and Ransomware A now-patched vulnerability in VMware Workspace ONE Access has been observed being exploited to deliver both cryptocurrency miners and ransomware on affected machines. "The attacker intends to utilize a victim's resources as much as possible, not only to install RAR1Ransom for extortion, but also ... Read More

Hackers Started Exploiting Critical "Text4Shell" Apache Commons Text Vulnerability WordPress security company Wordfence on Thursday said it started detecting exploitation attempts targeting the newly disclosed flaw in Apache Commons Text on October 18, 2022. The vulnerability, tracked as CVE-2022-42889 aka Text4Shell, has been assigned a severity ranking of 9.8 out of a possible ... Read More

A Quick Look at the "Strengthening America's Cybersecurity" Initiative Acknowledging that you have a problem is the first step to addressing the problem in a serious way. This seems to be the reasoning for the White House recently announcing its "Strengthening America's Cybersecurity" initiative. The text of the announcement contains several statements that anyone ... Read More

Moving Past Passwords (At Last!) 7 Key Takeaways to Passwordless Authentication Download Now Sponsored