Collaborate Disseminate
A now-patched critical remote code execution (RCE) vulnerability in GitLab’s web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to … Continue reading Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild
The U.S. Commerce Department on Wednesday added four companies, including Israel-based spyware companies NSO Group and Candiru, to a list of entities engaging in “malicious cyber activities.”
The agency said the two companies were added to the list bas… Continue reading US Sanctions Pegasus-maker NSO Group and 3 Others For Selling Spyware
Facebook’s newly-rebranded parent company Meta on Tuesday announced plans to discontinue its decade-old “Face Recognition” system and delete a massive trove of more than a billion users’ facial recognition templates as part of a wider initiative to lim… Continue reading Facebook to Shut Down Facial Recognition System and Delete Billions of Records
An analysis of new samples of BlackMatter ransomware for Windows and Linux has revealed the extent to which the operators have continually added new features and encryption capabilities in successive iterations over a three-month period.
No fewer than … Continue reading BlackMatter Ransomware Reportedly Shutting Down; Latest Analysis Released
The operators behind the Mekotio banking trojan have resurfaced with a shift in its infection flow so as to stay under the radar and evade security software, while staging nearly 100 attacks over the last three months.
“One of the main characteristics … Continue reading Mekotio Banking Trojan Resurfaces with New Attacking and Stealth Techniques
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively exploited in the wild in limited, targeted attacks.
Tracked as CVE-2021-1048, the zero-day bug is … Continue reading Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks
Google on Monday announced that it will pay security researchers to find exploits using vulnerabilities, previously remediated or otherwise, over the next three months as part of a new bug bounty program to improve the security of the Linux kernel.
To … Continue reading Google to Pay Hackers $31,337 for Exploiting Patched Linux Kernel Flaws
A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that’s semantically permissible but alters the logic defined by the source code, effectively opening the door to more first-party and sup… Continue reading New ‘Trojan Source’ Technique Lets Hackers Hide Vulnerabilities in Source Code
Multiple vulnerabilities have been disclosed in Hitachi Vantara’s Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the applicati… Continue reading Critical Flaws Uncovered in Pentaho Business Analytics Software
Cybersecurity researchers disclosed details of what they say is the “largest botnet” observed in the wild in the last six years, infecting over 1.6 million devices primarily located in China, with the goal of launching distributed denial-of-service (DD… Continue reading Researchers Uncover ‘Pink’ Botnet Malware That Infected Over 1.6 Million Devices