Collaborate Disseminate
Researchers have discovered a new Android banking malware that targets Brazil’s Itaú Unibanco with the help of lookalike Google Play Store pages to carry out fraudulent financial transactions on victim devices without their knowledge.
“This applicatio… Continue reading New Android Malware Targeting Brazil’s Itaú Unibanco Bank Customers
A number of security flaws have been uncovered in a networking component in Garrett Metal Detectors that could allow remote attackers to bypass authentication requirements, tamper with metal detector configurations, and even execute arbitrary code on … Continue reading Garrett Walk-Through Metal Detectors Can Be Hacked Remotely
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to “trivially and reliably” bypass a “myriad of foundational macOS security mechanisms” and run arbitrary code.
Security … Continue reading Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security
Ransomware groups continue to evolve their tactics and techniques to deploy file-encrypting malware on compromised systems, notwithstanding law enforcement’s disruptive actions against the cybercrime gangs to prevent them from victimizing additional c… Continue reading New Ransomware Variants Flourish Amid Law Enforcement Actions
Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the radar with the goal of deploying Cobalt Strike and BitRAT payloads on … Continue reading New BLISTER Malware Using Code Signing Certificates to Evade Detection
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitation of multiple vulnerabilities in Apache’s Log4j software library by nefarious adversaries.
“… Continue reading CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities
A security flaw has been unearthed in Microsoft’s Azure App Service that resulted in the exposure of source code of customer applications written in Java, Node, PHP, Python, and Ruby for at least four years since September 2017.
The vulnerability, cod… Continue reading 4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories
Microsoft said it won’t be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication platform earlier this March.
The disclosure comes from Berlin-based cybersecurity firm Positive … Continue reading Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software
Microsoft is urging customers to patch two security vulnerabilities in Active Directory domain controllers that it addressed in November following the availability of a proof-of-concept (PoC) tool on December 12.
The two vulnerabilities — tracked as C… Continue reading Active Directory Bugs Could Let hackers Take Over Windows Domain Controllers
China’s internet regulator, the Ministry of Industry and Information Technology (MIIT), has temporarily suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six months on account of the fact… Continue reading China suspends deal with Alibaba for not sharing Log4j 0-day first with the government