Malware & Threats

Exploitation of Critical ownCloud Vulnerability Begins

Exploitation of Critical ownCloud Vulnerability Begins 28/11/2023 at 18:01 By Ionut Arghire Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure. The post Exploitation of Critical ownCloud Vulnerability Begins appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

Exploitation of Critical ownCloud Vulnerability Begins Read More »

Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine

Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine 20/11/2023 at 15:46 By Ionut Arghire Gamaredon’s self-propagating LitterDrifter USB worm spreads from Ukraine to the US and other countries. The post Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Loading spinner

Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine Read More »

US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website

US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website 17/11/2023 at 19:18 By Ionut Arghire Wisconsin teenager Joseph Garrison has admitted in court to launching a credential stuffing attack on a betting website. The post US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website appeared first on SecurityWeek. This

React to this headline:

Loading spinner

US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website Read More »

CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability

CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability 17/11/2023 at 16:20 By Eduard Kovacs CISA adds Sophos, Oracle and Microsoft product security holes to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Loading spinner

CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability Read More »

Zimbra Zero-Day Exploited to Hack Government Emails

Zimbra Zero-Day Exploited to Hack Government Emails 16/11/2023 at 19:46 By Eduard Kovacs Google says a Zimbra zero-day from earlier this year, CVE-2023-37580, was exploited in several campaigns to hack government emails. The post Zimbra Zero-Day Exploited to Hack Government Emails appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Loading spinner

Zimbra Zero-Day Exploited to Hack Government Emails Read More »

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea 15/11/2023 at 17:01 By Eduard Kovacs US government announces the takedown of the IPStorm proxy service botnet and the guilty plea of its creator, a Russian/Moldovan national. The post US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea appeared first on SecurityWeek. This article

React to this headline:

Loading spinner

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea Read More »

Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion

Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion 14/11/2023 at 21:46 By Ryan Naraine Adobe patches 72 security bugs and calls special attention to code-execution defects in the widely deployed Acrobat and Reader software. The post Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Loading spinner

Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion Read More »

MySQL Servers, Docker Hosts Infected With DDoS Malware

MySQL Servers, Docker Hosts Infected With DDoS Malware 14/11/2023 at 19:47 By Ionut Arghire Researchers warn attackers are targeting MySQL servers and Docker hosts to plant malware capable of launching distributed DDoS attacks. The post MySQL Servers, Docker Hosts Infected With DDoS Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

MySQL Servers, Docker Hosts Infected With DDoS Malware Read More »

Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads

Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads 14/11/2023 at 16:16 By Eduard Kovacs Google files a lawsuit against cybercriminals who delivered account-hijacking malware by offering fake Bard AI downloads.  The post Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Loading spinner

Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads Read More »

Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform

Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform 09/11/2023 at 19:47 By Ionut Arghire The Washington, DC startup is building a threat-informed defense platform that helps organizations automate detection and response work. The post Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Loading spinner

Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform Read More »

‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools

‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools 09/11/2023 at 17:46 By Ionut Arghire Checkmarx uncovers a malicious campaign targeting Python developers with malware that takes over their systems. The post ‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools Read More »

CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild

CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild 09/11/2023 at 13:32 By Ionut Arghire CISA says an SLP vulnerability allowing for a DoS amplification factor of 2,000 is being exploited in attacks. The post CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild appeared first on SecurityWeek. This

React to this headline:

Loading spinner

CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild Read More »

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes 09/11/2023 at 12:16 By Ryan Naraine Mandiant says Russia’s Sandworm hackers used a novel OT attack to cause power outages that coincided with mass missile strikes on critical infrastructure across Ukraine. The post Russian Hackers Used Novel OT Attack to Disrupt

React to this headline:

Loading spinner

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes Read More »

Dropper Service Bypassing Android Security Restrictions to Install Malware

Dropper Service Bypassing Android Security Restrictions to Install Malware 08/11/2023 at 14:01 By Ionut Arghire ThreatFabric warns of a dropper service bypassing recent Android security restrictions to install spyware and banking trojans. The post Dropper Service Bypassing Android Security Restrictions to Install Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

Dropper Service Bypassing Android Security Restrictions to Install Malware Read More »

New MacOS Malware Linked to North Korean Hackers

New MacOS Malware Linked to North Korean Hackers 07/11/2023 at 18:04 By Kevin Townsend New macOS malware, tracked by Jamf as ObjCShellz, is likely being used by North Korean hackers to target crypto exchanges The post New MacOS Malware Linked to North Korean Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Loading spinner

New MacOS Malware Linked to North Korean Hackers Read More »

Iranian APT Targets Israeli Education, Tech Sectors With New Wipers

Iranian APT Targets Israeli Education, Tech Sectors With New Wipers 06/11/2023 at 15:01 By Ionut Arghire The Iran-linked APT Agrius has been targeting higher education and technology organizations in Israel with new wipers. The post Iranian APT Targets Israeli Education, Tech Sectors With New Wipers appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Loading spinner

Iranian APT Targets Israeli Education, Tech Sectors With New Wipers Read More »

Apache ActiveMQ Vulnerability Exploited as Zero-Day

Apache ActiveMQ Vulnerability Exploited as Zero-Day 04/11/2023 at 19:31 By Eduard Kovacs The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10. The post Apache ActiveMQ Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Loading spinner

Apache ActiveMQ Vulnerability Exploited as Zero-Day Read More »

North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks

North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks 04/11/2023 at 19:31 By Ionut Arghire Security researchers uncover new macOS and Windows malware associated with the North Korea-linked Lazarus Group. The post North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks Read More »

Mozi Botnet Likely Killed by Its Creators

Mozi Botnet Likely Killed by Its Creators 01/11/2023 at 20:03 By Eduard Kovacs The recent shutdown of the Mozi botnet is believed to have been carried out by its creators, possibly forced by Chinese authorities.  The post Mozi Botnet Likely Killed by Its Creators appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Loading spinner

Mozi Botnet Likely Killed by Its Creators Read More »

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks 01/11/2023 at 17:31 By Ionut Arghire Check Point reports that an Iranian APT has been observed using a new malware framework in targeted attacks in the Middle East. The post Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks appeared first on SecurityWeek. This article is

React to this headline:

Loading spinner

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks Read More »

Scroll to Top