Collaborate Disseminate
Researchers at Cyfirma have discovered FireScam, an Android malware disguised as ‘Telegram Premium’ that steals data, monitors activity, and infiltrates devices. Learn about its distribution, functionality, and the impact on user privacy. Continue reading New FireScam Infostealer Spyware Hits Android via Fake Telegram Premium
Researchers discovered a malicious package on the npm package registry that resembles a library for Ethereum smart contract vulnerabilities but actually drops an open-source remote access trojan called Quasar RAT onto developer systems. Continue reading NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
A recent claim that a critical zero-day vulnerability existed in the popular open-source file archiver 7-Zip has been met with skepticism from the software’s creator and other security researchers. Continue reading Fake 7-Zip Exploit Code Traced to AI-Generated Misinterpretation
Researchers at FortiGuard Labs have identified a prolific attacker group known as “EC2 Grouper” who frequently exploits compromised credentials using AWS tools. Continue reading FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits
SUMMARY A sophisticated attack campaign has compromised at least 16 Chrome browser extensions, exposing over 600,000 users to… Continue reading 16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme
SUMMARY A recent report from the German news outlet Spiegel has revealed a significant security breach impacting hundreds… Continue reading Exposed Cloud Server Tracks 800,000 Volkswagen, Audi, and Skoda EVs
SUMMARY: VulnCheck has discovered a critical new vulnerability (CVE-2024-12856) affecting Four-Faith industrial routers (F3x24 and F3x36), with evidence… Continue reading Critical Flaw Exposes Four-Faith Routers to Remote Exploitation
Mirai and Keksec botnet variants are exploiting critical vulnerabilities in D-Link routers. Learn about the impact, affected devices, and how to protect yourself from these attacks. Continue reading FICORA, CAPSAICIN Botnets Exploit Old D-Link Router Flaws for DDoS Attacks
iProov uncovers a major Dark Web operation selling stolen identities with matching biometrics, posing a serious threat to KYC verification systems Continue reading Researchers Uncover Dark Web Operation Entirely Focused on KYC Bypass
A US court ruled against NSO Group, an Israeli spyware maker, finding them liable for hacking WhatsApp users. The ruling has major implications for the surveillance technology industry.” Continue reading WhatsApp Wins Lawsuit Against Israeli Spyware Maker NSO Group