Collaborate Disseminate
A group of academics from the University of California, Santa Barbara, has demonstrated what it calls a “scalable technique” to vet smart contracts and mitigate state-inconsistency bugs, discovering 47 zero-day vulnerabilities on the Ethereum blockcha… Continue reading SAILFISH System to Find State-Inconsistency Bugs in Smart Contracts
A persistent denial-of-service (DoS) vulnerability has been discovered in Apple’s iOS mobile operating system that’s capable of sending affected devices into a crash or reboot loop upon connecting to an Apple Home-compatible appliance.
The behavior, d… Continue reading Researchers Detail New HomeKit ‘doorLock’ Bug Affecting Apple iOS
Trojanized installers of the Telegram messaging application are being used to distribute the Windows-based Purple Fox backdoor on compromised systems.
That’s according to new research published by Minerva Labs, describing the attack as different from … Continue reading Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware
Cybersecurity researchers have proposed a novel approach that harnesses electromagnetic field emanations from the Internet of Things (IoT) devices as a side-channel to glean precise knowledge about the different kinds of malware targeting the embedded… Continue reading Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations
Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms due to what it blamed on a date validation error at around the turn of the year.
“The problem relates to a date … Continue reading Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service
A previously unknown rootkit has been found setting its sights on Hewlett-Packard Enterprise’s Integrated Lights-Out (iLO) server management technology to carry out in-the-wild attacks that tamper with the firmware modules and completely wipe data off… Continue reading New iLOBleed Rootkit Targeting HP Enterprise Servers with Data Wiping Attacks
A never-before-seen China-based targeted intrusion adversary dubbed Aquatic Panda has been observed leveraging critical flaws in the Apache Log4j logging library as an access vector to perform various post-exploitation operations, including reconnaiss… Continue reading Chinese APT Hackers Used Log4Shell Exploit to Target Academic Institution
An ongoing crypto mining campaign has upgraded its arsenal while evolving its defense evasion tactics that enable the threat actors to conceal the intrusions and fly under the radar, new research published today has revealed.
Since first detected in 2… Continue reading Ongoing Autom Cryptomining Malware Attacks Using Upgraded Evasion Tactics
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat actors to run malicious code on affected systems, making it the fifth security shortcoming to … Continue reading New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
Cybersecurity researchers have offered a detailed glimpse into a system called DoubleFeature that’s dedicated to logging the different stages of post-exploitation stemming from the deployment of DanderSpritz, a full-featured malware framework used by … Continue reading Experts Detail Logging Tool of DanderSpritz Framework Used by Equation Group Hackers