Collaborate Disseminate
The politically motivated Moses Staff hacker group has been observed using a custom multi-component toolset with the goal of carrying out espionage against its targets as part of a new campaign that exclusively singles out Israeli organizations.
First… Continue reading Moses Staff Hackers Targeting Israeli Organizations for Cyber Espionage
The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features.
“TrickBot is … Continue reading TrickBot Malware Targeted Customers of 60 High-Profile Companies Since 2020
VMware on Tuesday patched several high-severity vulnerabilities impacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could be exploited to execute arbitrary code and cause a denial-of-service (DoS) condition.
As … Continue reading VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution (RCE) on affected installations.
“This Apache security vulnerability i… Continue reading High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
The European Union’s data protection authority on Tuesday called for a ban on the development and the use of Pegasus-like commercial spyware in the region, calling out the technology’s “unprecedented level of intrusiveness” that could endanger users’ … Continue reading EU Data Protection Watchdog Calls for Ban on Pegasus-like Commercial Spyware
Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company’s use of cookies to allegedly track Facebook users’ internet activity even after they had logged off from the platform.
In addition, the social media company will be req… Continue reading Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case
Cybersecurity researchers have detailed the inner workings of ShadowPad, a sophisticated and modular backdoor that has been adopted by a growing number of Chinese threat groups in recent years, while also linking it to the country’s civilian and milit… Continue reading Researchers Link ShadowPad Malware Attacks to Chinese Ministry and PLA
Entities in the aviation, aerospace, transportation, manufacturing, and defense industries have been targeted by a persistent threat group since at least 2017 as part of a string of spear-phishing campaigns mounted to deliver a variety of remote acces… Continue reading Experts Warn of Hacking Group Targeting Aviation and Defense Sectors
A new version of the MyloBot malware has been observed to deploy malicious payloads that are being used to send sextortion emails demanding victims to pay $2,732 in digital currency.
MyloBot, first detected in 2018, is known to feature an array of sop… Continue reading New MyloBot Malware Variant Sends Sextortion Emails Demanding $2,732 in Bitcoin
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that’s being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022.
The… Continue reading New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!