The Hacker News Daily Updates

"Python Developers Beware:  Clipper Malware Found in 450+ PyPI Packages."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 14 February 2023, 1340 UTC.  Content provided by email subscription to "The Hacker News Daily Updates."

Source:  https://mail.google.com/mail/u/0/#inbox/FMfcgzGrcXsbdNqBNZVdqcDDlKFtXxPB ("The Hacker News Daily Updates").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

The Hacker News Daily Updates

Benchmarking Cyber Risk and Readiness Understanding the Prevalence and Risk of Internet Exposed Protocols on Organizations Networks Download Now Sponsored

LATEST NEWS Feb 14, 2023

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages! Malicious actors have published more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to infect developer systems with clipper malware. Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a follow-up to a campaign that was initially disclosed in November 2022. The initial vector entails ... Read More

A CISOs Practical Guide to Storage and Backup Ransomware Resiliency One thing is clear. The "business value" of data continues to grow, making it an organization's primary piece of intellectual property. From a cyber risk perspective, attacks on data are the most prominent threat to organizations.  Regulators, cyber insurance firms, and auditors are paying much closer attention to the integrity, resilience, and recoverability of organization data – as well ... Read More

Show open-source some love by joining The Big Fix The Big Fix brings together developers & security practitioners worldwide to learn about application security and fix vulnerabilities in their favorite open-source projects. Join the Snyk event for a month of networking, winning swag, and making the internet more ... Read More

Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad Microsoft on Monday attributed a China-based cyber espionage actor to a set of attacks targeting diplomatic entities in South America. The tech giant's Security Intelligence team is tracking the cluster under the emerging moniker DEV-0147, describing the activity as an "expansion of the group's data exfiltration operations that traditionally targeted government agencies and think tanks in ... Read More

Massive HTTP DDoS Attack Hits Record High of 71 Million Requests/Second Web infrastructure company Cloudflare on Monday disclosed that it thwarted a record-breaking distributed denial-of-service (DDoS) attack that peaked at over 71 million requests per second (RPS). "The majority of attacks peaked in the ballpark of 50-70 million requests per second (RPS) with the largest exceeding 71 million," the company said, calling it a "hyper-volumetric" DDoS attack. It's ... Read More

Patch Now: Apple's iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw Apple on Monday rolled out security updates for iOS, iPadOS, macOS, and Safari to address a zero-day flaw that it said has been actively exploited in the wild. Tracked as CVE-2023-23529, the issue relates to a type confusion bug in the WebKit browser engine that could be activated when processing maliciously crafted web content, culminating in arbitrary code execution. The iPhone maker said ... Read More

Hackers Create Malicious Dota 2 Game Modes to Secretly Access Players' Systems An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena (MOBA) video game that could have been exploited to establish backdoor access to players' systems. The modes exploited a high-severity flaw in the V8 JavaScript engine tracked as CVE-2021-38003 (CVSS score: 8.8), which was exploited as a zero-day and addressed by Google in October 2021. "Since ... Read More

Honeypot-Factory: The Use of Deception in ICS/OT Environments The recently published Security Navigator report of Orange Cyberdefense shows there has been a  rapid increase of attacks on industrial control systems (ICS) in the past few years. Looking a bit closer, most of the attacks seem to have spilt over from traditional IT. That's to be expected, as production systems are commonly connected to ordinary corporate networks at this point. Though the ... Read More

Benchmarking Cyber Risk and Readiness Understanding the Prevalence and Risk of Internet Exposed Protocols on Organizations Networks Download Now Sponsored