Collaborate Disseminate
Mozilla is beginning to roll out Firefox 95 with a new sandboxing technology called RLBox that prevents untrusted code and other security vulnerabilities from causing “accidental defects as well as supply-chain attacks.”
Dubbed “RLBox” and implemented… Continue reading Latest Firefox 95 Includes RLBox Sandboxing to Protect Browser from Malicious Code
Users looking to activate Windows without using a digital license or a product key are being targeted by tainted installers to deploy malware designed to plunder credentials and other information in cryptocurrency wallets.
The malware, dubbed “CryptBo… Continue reading Malicious KMSPico Windows Activator Stealing Users’ Cryptocurrency Wallets
Cryptocurrency trading platform BitMart has disclosed a “large-scale security breach” that it blamed on a stolen private key, resulting in the theft of more than $150 million in various cryptocurrencies.
The breach is said to have impacted two of its … Continue reading Hackers Steal $200 Million Worth of Cryptocurrency Tokens from BitMart Exchange
Researchers have discovered 14 new types of cross-site data leakage attacks against a number of modern web browsers, including Tor Browser, Mozilla Firefox, Google Chrome, Microsoft Edge, Apple Safari, and Opera, among others.
Collectively known as “X… Continue reading 14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web Browsers
Apple reportedly notified several U.S. Embassy and State Department employees that their iPhones may have been targeted by an unknown assailant using state-sponsored spyware created by the controversial Israeli company NSO Group, according to multiple… Continue reading Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats
Enterprise software provider Zoho on Friday warned that a newly patched critical flaw in its Desktop Central and Desktop Central MSP is being actively exploited by malicious actors, marking the third security vulnerability in its products to be abused… Continue reading Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks
A Pakistani threat actor successfully socially engineered a number of ministries in Afghanistan and a shared government computer in India to steal sensitive Google, Twitter, and Facebook credentials from its targets and stealthily obtain access to gov… Continue reading Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly patched flaw in Zoho’s ManageEngine ServiceDesk Plus product to deploy web shells and carry ou… Continue reading CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability
A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to trick users into downloading a new backdoor and an undocumented malicious Google Chrome exten… Continue reading New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions
E-commerce platforms in the U.S., Germany, and France have come under attack from a new form of malware that targets Nginx servers in an attempt to masquerade its presence and slip past detection by security solutions.
“This novel code injects itself … Continue reading New Payment Data Stealing Malware Hides in Nginx Process on Linux Servers