Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA pinned the activity on a threat cluster it tracks as UAC-0145, which is a subgroup within Sandworm (aka APT44,
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
TN

The Hacker News

1h ago
0 0

Discussion

Leave the first comment

Be the first to leave a mark on this discussion.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Explo…

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5. 6‑Cyber that it said is focused on vulnerability research, penetration testing, and i…
TA

taylor??

3h ago
0
bleepingcomputer.com
US and South Korea warn of Gunra ransomware targeting govt agen…

U. S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems a…
Carlos the great

Carlos the great

8h ago
0
thehackernews.com
Hackers Breach Polish Power Plant Controls via Private Cellular…

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular net…
TN

The Hacker News

10h ago
0
darkreading.com
'GhostJacking' Exposes Identity Governance Gaps in AI Agents

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
DR

Dark Reading

15h ago
0
darkreading.com
The Patch Gap: Why Defenders Need to Think in Chains, Not Check…

It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
DR

Dark Reading

22h ago
0
thehackernews.com
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Sp…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fix…
JA

jordan af

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Explo…

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5. 6‑Cyber that it said is focused on vulnerability research, penetration testing, and i…
TA

taylor??

3h ago
0
thehackernews.com
Hackers Breach Polish Power Plant Controls via Private Cellular…

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular net…
TN

The Hacker News

10h ago
0
thehackernews.com
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Sp…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fix…
JA

jordan af

1d ago
0
thehackernews.com
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys,…

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Eno…

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation…
TN

The Hacker News

1d ago
0
thehackernews.com
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence …

Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outsi…
Golden Greta

Golden Greta

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest