In Other News: 400 CNAs, Crash Reports, Schlatter Cyberattack 2024-08-16 at 17:46 By SecurityWeek News Noteworthy stories that might have slipped under the radar: there are 400 CVE Numbering Authorities, crash reports can be a valuable source of information, and Schlatter was hit by a cyberattack. The post In Other News: 400 CNAs, Crash Reports, […]
In Other News: 400 CNAs, Crash Reports, Schlatter Cyberattack Read More »
Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign 2024-08-16 at 17:46 By Ionut Arghire Security researchers at Palo Alto Networks discover a threat actor extorting organizations after compromising their cloud environments using inadvertently exposed environment variables. The post Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign appeared first on SecurityWeek. This […]
Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign Read More »
New Banshee Stealer macOS Malware Priced at $3,000 Per Month 2024-08-16 at 14:46 By Eduard Kovacs Russian cybercriminals are advertising a new macOS malware, Banshee Stealer, capable of stealing passwords, browser data, and crypto wallets. The post New Banshee Stealer macOS Malware Priced at $3,000 Per Month appeared first on SecurityWeek. This article is an […]
New Banshee Stealer macOS Malware Priced at $3,000 Per Month Read More »
Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw 2024-08-15 at 20:01 By Ryan Naraine Security experts are ratcheting up the urgency for Windows admins to patch a wormable, pre-auth remote code execution vulnerability in the Windows TCP/IP stack. The post Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw appeared first on […]
Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw Read More »
Researcher Sounds Alarm on Windows Update Flaws Allowing Undetectable Downgrade Attacks 2024-08-07 at 18:16 By Ryan Naraine Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days. The post Researcher Sounds Alarm on Windows Update Flaws Allowing Undetectable Downgrade Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]
Researcher Sounds Alarm on Windows Update Flaws Allowing Undetectable Downgrade Attacks Read More »
Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning 2024-08-05 at 16:47 By Eduard Kovacs Chinese group StormBamboo spotted delivering Windows and macOS malware by compromising an ISP and using DNS poisoning. The post Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View […]
Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning Read More »
New BlankBot Android Trojan Can Steal User Data 2024-08-02 at 15:16 By Ionut Arghire The BlankBot Android trojan exfiltrates user data, executes C&C commands, and supports custom injections, keylogging, and screen recording. The post New BlankBot Android Trojan Can Steal User Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]
New BlankBot Android Trojan Can Steal User Data Read More »
Cloudflare Tunnels Abused for Malware Delivery 2024-08-02 at 13:46 By Ionut Arghire Threat actors are abusing Cloudflare’s TryCloudflare feature to create one-time tunnels for the distribution of remote access trojans. The post Cloudflare Tunnels Abused for Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source
Cloudflare Tunnels Abused for Malware Delivery Read More »
BingoMod Android RAT Wipes Devices After Stealing Money 2024-08-01 at 15:16 By Ionut Arghire The BingoMod Android trojan steals user information and communication and allows attackers to steal money via account takeover. The post BingoMod Android RAT Wipes Devices After Stealing Money appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]
BingoMod Android RAT Wipes Devices After Stealing Money Read More »
Massive OTP-Stealing Android Malware Campaign Discovered 2024-07-31 at 20:16 By Kevin Townsend Android malware can intercept and steal OTPs and login credentials, leading to complete account takeovers. The post Massive OTP-Stealing Android Malware Campaign Discovered appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source
Massive OTP-Stealing Android Malware Campaign Discovered Read More »
Chrome 127 Improves Cookie Protection on Windows 2024-07-31 at 16:06 By Ionut Arghire Google has improved the security of cookies in Chrome on Windows and rolled out a Chrome 127 update to address critical- and high-severity vulnerabilities. The post Chrome 127 Improves Cookie Protection on Windows appeared first on SecurityWeek. This article is an excerpt […]
Chrome 127 Improves Cookie Protection on Windows Read More »
Indian APT Targeting Mediterranean Ports and Maritime Facilities 2024-07-30 at 17:01 By Ionut Arghire The SideWinder APT has been targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea in recent attacks. The post Indian APT Targeting Mediterranean Ports and Maritime Facilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Indian APT Targeting Mediterranean Ports and Maritime Facilities Read More »
Thousands Download New Mandrake Android Spyware Version From Google Play 2024-07-30 at 13:16 By Ionut Arghire Five Android applications containing the Mandrake spyware have been downloaded over 32,000 times from Google Play since 2022. The post Thousands Download New Mandrake Android Spyware Version From Google Play appeared first on SecurityWeek. This article is an excerpt […]
Thousands Download New Mandrake Android Spyware Version From Google Play Read More »
Network of 3,000 GitHub Accounts Used for Malware Distribution 2024-07-25 at 14:16 By Ionut Arghire Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories. The post Network of 3,000 GitHub Accounts Used for Malware Distribution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]
Network of 3,000 GitHub Accounts Used for Malware Distribution Read More »
Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine 2024-07-25 at 14:16 By Ryan Naraine A fresh Mandiant report documents North Korea’s APT45 as a distinct hacking team conducting cyberespionage and ransomware operations. The post Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine appeared first on SecurityWeek. This article is […]
Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine Read More »
Google Boosts Chrome Protections Against Malicious Files 2024-07-25 at 12:16 By Ionut Arghire Google has announced improved protections for Chrome users when downloading files from the internet. The post Google Boosts Chrome Protections Against Malicious Files appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source
Google Boosts Chrome Protections Against Malicious Files Read More »
Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident 2024-07-24 at 19:16 By Kevin Townsend Sygnia discovered what it believes to be a variant of the GhostEmperor infection chain leading to the Demodex rootkit – which was first seen and described in 2021. The post Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber […]
Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident Read More »
Telegram Zero-Day Enabled Malware Delivery 2024-07-23 at 15:16 By Ionut Arghire The EvilVideo zero-day vulnerability in Telegram for Android allowed threat actors to send malicious files disguised as videos. The post Telegram Zero-Day Enabled Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source
Telegram Zero-Day Enabled Malware Delivery Read More »
CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams 2024-07-22 at 13:47 By Eduard Kovacs The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery. The post CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]
CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams Read More »
Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns 2024-07-18 at 22:01 By Ryan Naraine Chinese government-backed hacking team caught breaking into organizations in shipping, logistics and automotive sectors in Europe and Asia. The post Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns appeared first on SecurityWeek. This […]
Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns Read More »