Collaborate Disseminate
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical “wormable” vulnerability.
Of the 96 vulnerabiliti… Continue reading First Patch Tuesday of 2022 Brings Fix for a Critical ‘Wormable’ Windows Vulnerability
Cybersecurity researchers have detailed a high severity flaw in KCodes NetUSB component that’s integrated into millions of end-user router devices from Netgear, TP-Link, Tenda, EDiMAX, D-Link, and Western Digital, among others.
KCodes NetUSB is a Linu… Continue reading New KCodes NetUSB Bug Affect Millions of Routers from Different Vendors
Moxie Marlinspike, the founder of the popular encrypted instant messaging service Signal, has announced that he is stepping down as the chief executive of the non-profit in a move that has been underway over the last few months.
“In other words, after… Continue reading Signal CEO Resigns, WhatsApp Co-Founder Takes Over as Interim CEO
Microsoft on Monday disclosed details of a recently patched security vulnerability in Apple’s macOS operating system that could be weaponized by a threat actor to expose users’ personal information.
Tracked as CVE-2021-30970, the flaw concerns a logic… Continue reading Microsoft Details macOS Bug That Could Let Attackers Gain Access to User Data
The European Union’s data protection watchdog on Monday ordered Europol to delete a vast trove of personal data it obtained pertaining to individuals with no proven links to criminal activity.
“Datasets older than six months that have not undergone th… Continue reading Europol Ordered to Delete Data of Individuals With No Proven Links to Crimes
A study of 16 different Uniform Resource Locator (URL) parsing libraries has unearthed inconsistencies and confusions that could be exploited to bypass validations and open the door to a wide range of attack vectors.
In a deep-dive analysis jointly co… Continue reading Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
New research into the infrastructure behind an emerging DDoS botnet named Abcbot has uncovered “clear” links with a cryptocurrency-mining botnet attack that came to light in December 2020.
Attacks involving Abcbot, first disclosed by Qihoo 360’s Netla… Continue reading Abcbot Botnet Linked to Operators of Xanthe Cryptomining malware
Threat hunters have shed light on the tactics, techniques, and procedures embraced by an Indian-origin hacking group called Patchwork as part of a renewed campaign that commenced in late November 2021, targeting Pakistani government entities and indiv… Continue reading BADNEWS! Patchwork APT Hackers Score Own Goal in Recent Malware Attacks
Meta Platforms, the company formerly known as Facebook, on Friday announced the launch of a centralized Privacy Center that aims to “educate people” about its approach with regards to how it collects and processes personal information across its famil… Continue reading Facebook Launches ‘Privacy Center’ to Educate Users on Data Collection and Privacy Options
The digital security team at the U.K. National Health Service (NHS) has raised the alarm on active exploitation of Log4Shell vulnerabilities in unpatched VMware Horizon servers by an unknown threat actor to drop malicious web shells and establish pers… Continue reading NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon