Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday published an Industrial Controls Systems Advisory (ICSA) warning of multiple vulnerabilities in the Airspan Networks Mimosa equipment that could be abused to gain remote code… Continue reading CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa
Cisco has patched multiple critical security vulnerabilities impacting its RV Series routers that could be weaponized to elevate privileges and execute arbitrary code on affected systems, while also warning of the existence of proof-of-concept (PoC) e… Continue reading Critical Flaws Discovered in Cisco Small Business RV Series Routers
An ongoing search engine optimization (SEO) poisoning attack campaign has been observed abusing trust in legitimate software utilities to trick users into downloading BATLOADER malware on compromised machines.
“The threat actor used ‘free productivity… Continue reading New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software
Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an “increasing progression of sophisticated capabilities.”
Th… Continue reading New Variant of UpdateAgent Malware Infects Mac Computers with Adware
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.
The intrusions are part… Continue reading New Wave of Cyber Attacks Target Palestine with Political Bait and Malware
The threat actor behind the supply chain compromise of SolarWinds has continued to expand its malware arsenal with new tools and techniques that were deployed in attacks as early as 2019, once indicative of the elusive nature of the campaigns and the … Continue reading New Malware Used by SolarWinds Attackers Went Undetected for Years
As many as 23 new high severity security vulnerabilities have been disclosed in different implementations of Unified Extensible Firmware Interface (UEFI) firmware used by numerous vendors, including Bull Atos, Fujitsu, HP, Juniper Networks, Lenovo, am… Continue reading Dozens of Security Flaws Discovered in UEFI Firmware Used by Several Vendors
A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious… Continue reading Hacker Group ‘Moses Staff’ Using New StrifeWater RAT in Ransomware Attacks
A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.
The plugin in question is Essential Addons for Elementor, which provides… Continue reading Critical Bug Found in WordPress Plugin for Elementor with Over a Million Installations
In a sign that threat actors continuously shift tactics and update their defensive measures, the operators of the SolarMarker information stealer and backdoor have been found leveraging stealthy Windows Registry tricks to establish long-term persisten… Continue reading SolarMarker Malware Uses Novel Techniques to Persist on Hacked Systems