The Hacker News | #1 Trusted Source for Cybersecurity News — Index Page

Facebook accounts are becoming favorite targets of hackers. If your account has been hacked, you could be in good company considering Facebook founder Mark Zuckerberg and French President Sarkozy have also been victims. Actually, thousands -- maybe millions -- of Facebook pages have been hacked. The hackers then use the accounts to send out erroneous messages to "friends." One of your friends seems to have sent you a video or awesome photo or link, and suggests you click on it. The computer screen tells you to log in again to see the video or photo or quiz. But as soon as you sign in,  you are giving your information to a hacking site, which now has your screen name and password.You probably would be suspicious of a strange e-mail in your inbox, but when you believe you are getting a link from a friend on a social network, you might not be so cautious. You have actually been caught by one of the most common forms of hacking called "phishing." Recently estimated ...

With Facebook playing a starring role in the revolts that toppled governments in Tunisia and Egypt, you might think the company's top executives would use this historic moment to highlight its role as the platform for democratic change. Instead, they really do not want to talk about it. The social media giant finds itself under countervailing pressures after the uprisings in the Middle East. While it has become one of the primary tools for activists to mobilize protests and share information, Facebook does not want to be seen as picking sides for fear that some countries — like Syria, where it just gained a foothold — would impose restrictions on its use or more closely monitor users, according to some company executives who spoke on the condition of anonymity because they were discussing internal business. And Facebook does not want to alter its firm policy requiring users to sign up with their real identities. The company says this requirement protects its users fro...

 Days after Facebook and Twitter added fuel to a revolt in Egypt, the Obama administration plans to announce a new policy on Internet freedom, designed to help people get around barriers in cyberspace while making it harder for autocratic governments to use the same technology to repress dissent. The State Department's policy, a year in the making, has been bogged down by fierce debates over which projects it should support, and even more basically, whether to view the Internet primarily as a weapon to topple repressive regimes or as a tool that autocrats can use to root out and crush dissent. Secretary of State Hillary Rodham Clinton, who will lay out the policy in a speech on Tuesday, acknowledged the Internet's dual role in an address a year ago, and administration officials said she would touch on that theme again, noting how social networks were used by both protesters and governments in the uprisings in Tunisia, Egypt and other Arab countr...

While phishing and ransomware dominate headlines, another critical risk quietly persists across most enterprises: exposed Git repositories leaking sensitive data. A risk that silently creates shadow access into core systems Git is the backbone of modern software development, hosting millions of repositories and serving thousands of organizations worldwide. Yet, amid the daily hustle of shipping code, developers may inadvertently leave behind API keys, tokens, or passwords in configuration files and code files, effectively handing attackers the keys to the kingdom. This isn't just about poor hygiene; it's a systemic and growing supply chain risk. As cyber threats become more sophisticated, so do compliance requirements. Security frameworks like NIS2, SOC2, and ISO 27001 now demand proof that software delivery pipelines are hardened and third-party risk is controlled. The message is clear: securing your Git repositories is no longer optional, it's essential. Below, we look at the ris...

Several Ortonville-area websites had similar messages from hackers Monday morning, warning the website owner of its vulnerability. "Your site has been hacked by me because we love you and we want to warn you," the hacker's message read. James Ellis, of Brandon Computers, is in charge of Brandon Township's website, www.BrandonTownship.us . It was one of many sites sharing the same server that were hacked. "For several years I have been doing this, and this is the first time I've seen it," Ellis said. Ellis said he fixed the problem and that there is no personal information on the site that can be stolen by hackers. The other websites belong to mostly local churches, Ellis said. Jay Radcliff, a web securities specialist, said vulnerable websites are listed on the Internet. He said hackers can find the websites through simple searches. "It's kind of like graffiti," Radcliff said. "They mark their territory saying, 'Hey, yo...

Spanish police say they've arrested a hacker who threatened to go public with personal information he found in a Nintendo database on about 4,000 of the company's users. Nintendo's Spanish division, Nintendo Ibérica, was approached by the hacker, who was seeking to blackmail the company, Spain's Interior Ministry said Monday. The hacker had apparently found the company's database on the Internet, and he allegedly tried to cut a deal with Nintendo, threatening to both publish the information in an online forum and lodge a complaint with Spain's Data Protection Agency if his demands were not met. Nintendo contacted law enforcement about the issue in early February. The database contained personal information on about 4,000 users, the Interior Ministry said. Nintendo ignored his demands, and the hacker published some of the data in an online forum. He intended to eventually publish the entire database, the Interior Ministry said. Spanish authorities did not n...

Plextor has been hacked. Just days after announcing a new series of solid state drives, the digital storage company has found its U.S. site defaced by a digital vandal calling himself " ViciOuS ". The altered page declares "Hacked by ViciOuS", and includes a shout-out to fellow hackers, a link to what appears to be a hacker oriented website, and even a legally dubious claim to copyright. On Plextor's website, the attack appears to be limited to its U.S. site, as the company's European and Asian websites have been left unchanged. A search using snippets of text found on the defaced page shows that similar hacks have occurred on several other websites as well. The attack coincides with the U.S. launch of Plextor's new M2 line of SSDs, which supports the latest 6Gb/s SATA and offers some of the fastest speeds on the market. Whether the timing of this attack was intentional or merely a coincidence is undetermined.

The Australian and New Zealand shopping site of cosmetics retailer Lush has been hacked just weeks after a similar breach occurred on the UK site.  Credit card details and other intimate information of shoppers have been exposed. If you visit the Lush Cosmetics Australian  website  you will find a single banner page announcing that the site has suffered a "Privacy Breach."  This is contained as a single JPG image with no other links on the page.  In fact if you use your favourite search engine to find sub-pages, they all return a 404 error.  It would appear that the entire site has been removed from the server and the single banner page put in its place. In part, the site statement says: We are sorry to have to announce that the Lush Australian and New Zealand websites have been hacked.  We have been alerted today to advise us that entry has been gained and customer personal data may have been obtained by the hackers. We urgently advise custom...

Anonymous Hackers announces next DDoS Target Iribnews.ir at 5am GMT ! FAX NAO:  https://pastebin.com/xwJEhCrd DDoS 5am GMT TARGET:  www.iribnews.ir  PORT:80 METHOD:TCP Press Release : Click Here VIDEOS: https://bit.ly/fnB8lR   https://bit.ly/gH0qIa LOIC Hive: loic.anonops.in  Channels:  #ir1