Collaborate Disseminate
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with the goal of delivering Formbook malw… Continue reading New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw
The transportation industry and government agencies related to the sector are the victims of an ongoing campaign since July 2020 by a sophisticated and well-equipped cyberespionage group in what appears to be yet another uptick in malicious activities… Continue reading Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector
Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol (VoIP) appliance from Auerswald, a German telecommunications hardware manufacturer, that could be abused to gain full admin… Continue reading Secret Backdoors Found in German-made Auerswald VoIP System
Facebook’s parent company Meta Platforms on Monday said it has filed a federal lawsuit in the U.S. state of California against bad actors who operated more than 39,000 phishing websites that impersonated its digital properties to mislead unsuspecting … Continue reading Meta Sues Hackers Behind Facebook, WhatsApp and Instagram Phishing Attacks
Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service (DoS) and man-in-the-middle (MitM) attacks using low… Continue reading New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G
A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as a “classic APT-type operation.”
“This attack could have gi… Continue reading Experts Discover Backdoor Deployed on the U.S. Federal Agency’s Network
A malicious Android app with more than 500,000 downloads from the Google Play app store has been found hosting malware that stealthily exfiltrates users’ contact lists to an attacker-controlled server and signs up users to unwanted paid premium subscr… Continue reading Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store
Cybersecurity researchers have discovered an entirely new attack vector that enables adversaries to exploit the Log4Shell vulnerability on servers locally by using a JavaScript WebSocket connection.
“This newly-discovered attack vector means that anyo… Continue reading New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the widely used logging library that could be exploited by malicious actors to stage a denial-of-service … Continue reading Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability
Meta Platforms on Thursday revealed it took steps to deplatform seven cyber mercenaries that it said carried out “indiscriminate” targeting of journalists, dissidents, critics of authoritarian regimes, families of opposition, and human rights activist… Continue reading Facebook Bans 7 ‘Cyber Mercenary’ Companies for Spying on 50,000 Users