Collaborate Disseminate
A now-patched vulnerability affecting Oracle VM VirtualBox could be potentially exploited by an adversary to compromise the hypervisor and cause a denial-of-service (DoS) condition.
“Easily exploitable vulnerability allows high privileged attacker wit… Continue reading Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox
Banking apps from Brazil are being targeted by a more elusive and stealthier version of an Android remote access trojan (RAT) that’s capable of carrying out financial fraud attacks by stealing two-factor authentication (2FA) codes and initiating rogue… Continue reading More Stealthier Version of BrazKing Android Malware Spotted in the Wild
Web hosting giant GoDaddy on Monday disclosed a data breach that resulted in the unauthorized access of data belonging to a total of 1.2 million active and inactive customers, making it the third security incident to come to light since 2018.
In a fil… Continue reading GoDaddy Data Breach Exposes Over 1 Million WordPress Customers’ Data
Weaknesses in e-commerce portals are being exploited to deploy a Linux backdoor as well as a credit card skimmer that’s capable of stealing payment information from compromised websites.
“The attacker started with automated e-commerce attack probes, t… Continue reading New Golang-based Linux Malware Targeting eCommerce Websites
Threat actors are exploiting ProxyLogon and ProxyShell exploits in unpatched Microsoft Exchange Servers as part of an ongoing spam campaign that leverages stolen email chains to bypass security software and deploy malware on vulnerable systems.
The fi… Continue reading Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns
Meta, the parent company of Facebook, Instagram, and WhatsApp, disclosed that it doesn’t intend to roll out default end-to-end encryption (E2EE) across all its messaging services until 2023, pushing its original plans by at least a year.
“We’re taking… Continue reading Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023
A corporate cyber-espionage hacker group has resurfaced after a seven-month hiatus with new intrusions targeting four companies this year, including one of the largest wholesale stores in Russia, while simultaneously making tactical improvements to it… Continue reading RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools
A threat actor with ties to North Korea has been linked to a prolific wave of credential theft campaigns targeting research, education, government, media and other organizations, with two of the attacks also attempting to distribute malware that could… Continue reading North Korean Hackers Found Behind a Range of Credential Theft Campaigns
Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, pass… Continue reading 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
The U.S. government on Thursday unsealed an indictment that accused two Iranian nationals of their involvement in cyber-enabled disinformation and threat campaign orchestrated to interfere in the 2020 presidential elections by gaining access to confid… Continue reading U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election