Collaborate Disseminate
The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also “hack every website you’ve ever visited.”
Continue reading Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2.
Continue reading Lazarus APT Uses Windows Update to Spew Malware
The sweetened deal came on the same day that Trustwave SpiderLabs published a new way to bypass Outlook security to deliver malicious links to victims.
Continue reading Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
The malware had already put millions of routers and IoT devices at risk, and now any noob can have at it.
Continue reading BotenaGo Botnet Code Leaked to GitHub
iOS 15.3 & iPadOS 15.3 fix the Safari browser flaw that could have spilled users’ browsing data, plus a zero day IOMobileFrameBuffer bug exploited in the wild. Continue reading Apple Fixes 2 Zero-Day Security Bugs, One Exploited in the Wild
The 12-year-old flaw in the sudo-like polkit’s pkexec tool, found in all major Linux distributions, is likely to be exploited in the wild within days. Continue reading Linux Bug in All Major Distros: ‘An Attacker’s Dream Come True’
A pro-democracy Hong Kong site was used to launch watering-hole attacks that planted a powerful macOS backdoor that researchers dubbed DazzleSpy.
Continue reading New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks
The two flaws in Control Web Panel – a popular web hosting management software used by 200K+ servers – allow code execution as root on Linux servers.
Continue reading Linux Servers at Risk of RCE Due to Critical CWP Bugs
The bug can allow attackers to remotely execute code on gamers’ computers. The devs temporarily deactivated PvP servers across multiple affected versions. Continue reading Dark Souls 3 Servers Shut Down Due to Critical RCE Bug
McAfee has patched two high-severity bugs in its Agent component, one of which can allow attackers to achieve arbitrary code execution with SYSTEM privileges.
Continue reading McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges