Collaborate Disseminate
Researchers have disclosed a security flaw affecting H2 database consoles that could result in remote code execution in a manner that echoes the Log4j “Log4Shell” vulnerability that came to light last month.
The issue, tracked as CVE-2021-42392, is th… Continue reading Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console
The Commission nationale de l’informatique et des libertés (CNIL), France’s data protection watchdog, has slapped Facebook (now Meta Platforms) and Google with fines of €150 million ($170 million) and €60 million ($68 million) for violating E.U. priva… Continue reading France Fines Google, Facebook €210 Million Over Privacy Violating Tracking Cookies
A North Korean cyberespionage group named Konni has been linked to a series of targeted attacks aimed at the Russian Federation’s Ministry of Foreign Affairs (MID) with New Year lures to compromise Windows systems with malware.
“This activity cluster … Continue reading North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry
Researchers have disclosed a novel technique by which malware on iOS can achieve persistence on an infected device by faking its shutdown process, making it impossible to physically determine if an iPhone is off or otherwise.
The discovery — dubbed “N… Continue reading New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly
VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an “important” security vulnerability that could be weaponized by a threat actor to take control of affected systems.
The issue relates to a heap-overflow vulnerability — … Continue reading VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products
Google has rolled out the first round of updates to its Chrome web browser for 2022 to fix 37 security issues, one of which is rated Critical in severity and could be exploited to pass arbitrary code and gain control over a victim’s system.
Tracked as… Continue reading Google Releases New Chrome Update to Patch Dozens of New Browser Vulnerabilities
Cybersecurity researchers have taken the wraps of an organized financial-theft operation undertaken by a discreet actor to target transaction processing systems and siphon funds from entities primarily located in Latin America for at least four years…. Continue reading Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation
An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft’s digital signature verification to siphon user credentials and sensitive information.
Israeli cybersecurity compan… Continue reading New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than 100 real estate websites operated by Sotheby’s Realty that involved injecting malicious skimmers to steal sensitive personal information.
“The attack… Continue reading Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy malware on vulnerable systems.
“Exploitation a… Continue reading Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities