Collaborate Disseminate
An advanced persistent threat group with links to Iran has updated its malware toolset to include a novel PowerShell-based implant called PowerLess Backdoor, according to new research published by Cybereason.
The Boston-headquartered cybersecurity com… Continue reading Iranian Hackers Using New PowerShell Backdoor in Cyber Espionage Attacks
Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to … Continue reading Ukraine Continues to Face Cyber Espionage Attacks from Russian Hackers
Details have emerged about a previously undocumented malware campaign undertaken by the Iranian MuddyWater advanced persistent threat (APT) group targeting Turkish private organizations and governmental institutions.
“This campaign utilizes malicious … Continue reading Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users
A number of security vulnerabilities have been disclosed in 42 Gears’ SureMDM device management solution that could be weaponized by attackers to perform a supply chain compromise against affected organizations.
Cybersecurity firm Immersive Labs, in a… Continue reading New SureMDM Vulnerabilities Could Expose Companies to Supply Chain Attacks
Samba has issued software updates to address multiple security vulnerabilities that, if successfully exploited, could allow remote attackers to execute arbitrary code with the highest privileges on affected installations.
Chief among them is CVE-2021-… Continue reading New Samba Bug Allows Remote Attackers to Execute Arbitrary Code as Root
Researchers have demonstrated a new type of fingerprinting technique that exploits a machine’s graphics processing unit (GPU) as a means to persistently track users across the web.
Dubbed DrawnApart, the method “identifies a device from the unique pro… Continue reading Your Graphics Card Fingerprint Can Be Used to Track Your Activities Across the Web
A regional court in the German city of Munich has ordered a website operator to pay €100 in damages for transferring a user’s personal data — i.e., IP address — to Google via the search giant’s Fonts library without the individual’s consent.
The unaut… Continue reading German Court Rules Websites Embedding Google Fonts Violates GDPR
A group of academics at South Korea’s Gwangju Institute of Science and Technology (GIST) have utilized natural silk fibers from domesticated silkworms to build an environmentally friendly digital security system that they say is “practically unbreacha… Continue reading Researchers Use Natural Silk Fibers to Generate Secure Keys for Strong Authentication
Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users’ online accounts, microphone, and webcam.
Security researcher Ryan Pickren, who discovered and report… Continue reading Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam
An Israeli national was sentenced to 97 months in prison in connection with operating the DeepDotWeb (DDW) clearnet website, nearly a year after the individual pleaded guilty to the charges.
Tal Prihar, 37, an Israeli citizen residing in Brazil, is sa… Continue reading DeepDotWeb News Site Operator Sentenced to 8 Years for Money Laundering