Collaborate Disseminate
The newborn platform was inundated by Sonic the Hedgehog-themed porn and had prominent users’ profiles defaced. Next, hackers posted its user database online. Continue reading Pro-Trump ‘Gettr’ Social Platform Hacked On Day One
Say hello to one more zero-day and yet more potential remote data death for those who can’t/won’t upgrade their My Cloud storage devices. Continue reading Western Digital Users Face Another RCE
The ongoing attacks are targeting cloud services such as Office 365 to steal passwords and password-spray a vast range of targets, including in U.S. and European governments and military.
Continue reading Widespread Brute-Force Attacks Tied to Russia’s APT28
The ongoing spear-phishing campaign targeting the Afghan government uses Dropbox as an API that leaves no traces of communications with weirdo websites. Continue reading Dropbox Used to Mask Malware Movement in Cyberespionage Campaign
Threat actors may have been duking it out for control of the compromised devices, first using a 2018 RCE, then password-protecting a new vulnerability. Continue reading Zero-Day Used to Wipe My Book Live Devices
The bug in Edge’s auto-translate could have let remote attackers pull off RCE on any foreign-language website just by sending a message with an XSS payload.
Continue reading Microsoft Translation Bugs Open Edge Browser to Trivial UXSS Attacks
The legit security tool has shown up 161 percent more, year-over-year, in cyberattacks, having “gone fully mainstream in the crimeware world.” Continue reading Cobalt Strike Usage Explodes Among Cybercrooks
The driver, called “Netfilter,” is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers’ geo-locations to cheat the system and play from anywhere, Microsoft said.
Continue reading Microsoft Signs Malware That Spreads Through Gaming
For over three years, a vendor was recklessly driving the cloud-stored data of luxury-car-owning customers and wannabe buyers. Continue reading Mercedes-Benz Customer Data Flies Out the Window
“I am totally screwed,” one user wailed after finding years of data nuked. Western Digital advised yanking the NAS storage devices offline ASAP: There’s an exploit.
Continue reading My Book Live Users Wake Up to Wiped Devices, Active RCE Attacks