Collaborate Disseminate
Google on Tuesday announced that it is abandoning its controversial plans for replacing third-party cookies in favor of a new Privacy Sandbox proposal called Topics, which categorizes users’ browsing habits into approximately 350 topics.
The new mecha… Continue reading Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads
A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems, even as a proof-of-concept (PoC) exploit has emerged in the wild merely hours after technical details of … Continue reading 12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
Cybersecurity researchers on Tuesday took the wraps off a multi-stage espionage campaign targeting high-ranking government officials overseeing national security policy and individuals in the defense industry in Western Asia.
The attack is unique as i… Continue reading Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets
The cybercrime operators behind the notorious TrickBot malware have once again upped the ante by fine-tuning its techniques by adding multiple layers of defense to slip past antimalware products.
“As part of that escalation, malware injections have be… Continue reading TrickBot Malware Using New Techniques to Evade Web Injection Attacks
A previously undocumented cyber-espionage malware aimed at Apple’s macOS operating system leveraged a Safari web browser exploit as part of a watering hole attack targeting politically active, pro-democracy individuals in Hong Kong.
Slovak cybersecuri… Continue reading Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks
The Android malware tracked as BRATA has been updated with new features that grants it the ability to record keystrokes, track device locations, and even perform a factory reset in an apparent bid to cover up fraudulent wire transfers.
The latest vari… Continue reading Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities
A previously undocumented malware packer named DTPacker has been observed distributing multiple remote access trojans (RATs) and information stealers such as Agent Tesla, Ave Maria, AsyncRAT, and FormBook to plunder information and facilitate follow-o… Continue reading Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection
Misconfigurations in smart contracts are being exploited by scammers to create malicious cryptocurrency tokens with the goal of stealing funds from unsuspecting users.
The instances of token fraud in the wild include hiding 99% fee functions and conce… Continue reading Hackers Creating Fraudulent Crypto Tokens as Part of ‘Rug Pull’ Scams
Social engineering campaigns involving the deployment of the Emotet malware botnet have been observed using “unconventional” IP address formats for the first time in a bid to sidestep detection by security solutions.
This involves the use of hexadecim… Continue reading Emotet Now Using Unconventional IP Address Formats to Evade Detection
The maintainers of the Rust programming language have released a security update for a high-severity vulnerability that could be abused by a malicious party to purge files and directories from a vulnerable system in an unauthorized manner.
“An attacke… Continue reading High-Severity Rust Programming Bug Could Lead to File, Directory Deletion