Collaborate Disseminate
Tech giant disables ProjectWEB cloud-based collaboration platform after threat actors gained access and nabbed files belonging to several state entities. Continue reading Fujitsu SaaS Hack Sends Govt. of Japan Scrambling
‘Privateers’ aren’t necessarily state-sponsored, but they have some form of government protection while promoting their own financially-motivated criminal agenda, according to Cisco Talos. Continue reading ‘Privateer’ Threat Actors Emerge from Cybercrime Swamp
Security researchers at Jamf discovered the XCSSET malware exploiting the vulnerability, patched in Big Sur 11.4, to take photos of people’s computer screens without their knowing. Continue reading Apple Patches Zero-Day Flaw in MacOS that Allows for Sneaky Screenshots
Microsoft Security discovered malicious PDFs that download Java-based StrRAT, which can steal credentials and change file names but doesn’t actually encrypt. Continue reading Email Campaign Spreads StrRAT Fake-Ransomware RAT
Company is using threat of attacks as defense in case brought against it by Epic Games after Fortnite was booted from the App Store for trying to circumvent developer fees. Continue reading Apple Exec Calls Level of Mac Malware ‘Unacceptable’
Customers panic and question parent company Anker’s security and privacy practices after learning their home videos could be accessed and even controlled by strangers due to a server-upgrade glitch. Continue reading Bug Exposes Eufy Camera Private Feeds to Random Users
Separate attacks last week on the country’s Department of Health and Health Service Executive forced the shutdown of networks and services that still haven’t been fully restored. Continue reading Unsuccessful Conti Ransomware Attack Still Packs Costly Punch
A flaw that allows browsers to enumerate applications on a machine threatens cross-browser anonymity in Chrome, Firefox, Microsoft Edge, Safari and even Tor. Continue reading ‘Scheme Flooding’ Allows Websites to Track Users Across Browsers
The ‘Send My’ exploit can use Apple’s locator service to collect and send information from nearby devices for later upload to iCloud servers. Continue reading Apple’s ‘Find My’ Network Exploited via Bluetooth
Malware first observed in Italy can steal victims’ credentials and SMS messages as well as livestream device screens on demand. Continue reading TeaBot Trojan Targets Banks via Hijacked Android Handsets