Collaborate Disseminate
Google’s Threat Analysis Group (TAG) on Thursday said it’s tracking more than 270 government-backed threat actors from more than 50 countries, adding it has approximately sent 50,000 alerts of state-sponsored phishing or malware attempts to customers s… Continue reading Google: We’re Tracking 270 State-Sponsored Hacker Groups From Over 50 Countries
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adversary to crash the client and even extract sensitive information like password hashes by sim… Continue reading Critical Remote Hacking Flaws Disclosed in Linphone and MicroSIP Softphones
As many as 130 different ransomware families have been found to be active in 2020 and the first half of 2021, with Israel, South Korea, Vietnam, China, Singapore, India, Kazakhstan, Philippines, Iran, and the U.K. emerging as the most affected territor… Continue reading VirusTotal Releases Ransomware Report Based on Analysis of 80 Million Samples
A large-scale unauthenticated scraping of publicly available and non-secured endpoints from older versions of Prometheus event monitoring and alerting solution could be leveraged to inadvertently leak sensitive information, according to the latest rese… Continue reading Experts Warn of Unprotected Prometheus Endpoints Exposing Sensitive Information
A now-patched critical vulnerability in OpenSea, the world’s largest non-fungible token (NFT) marketplace, could’ve been abused by malicious actors to drain cryptocurrency funds from a victim by sending a specially-crafted token, opening a new attack v… Continue reading Critical Flaw in OpenSea Could Have Let Hackers Steal Cryptocurrency From Wallets
Microsoft on Tuesday rolled out security patches to contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an actively exploited privilege escalation vulnerability that could be exploited in conjunction with … Continue reading Update Your Windows PCs Immediately to Patch New 0-Day Under Active Attack
Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has addressed in its products since the start of the year.’
The we… Continue reading Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability
The maintainers of LibreOffice and OpenOffice have shipped security updates to their productivity software to remediate multiple vulnerabilities that could be weaponized by malicious actors to alter documents to make them appear as if they are digitall… Continue reading Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice
Code hosting platform GitHub has revoked weak SSH authentication keys that were generated via the GitKraken git GUI client due to a vulnerability in a third-party library that increased the likelihood of duplicated SSH keys.
As an added precautionary m… Continue reading GitHub Revoked Insecure SSH Keys Generated by a Popular git Client
Microsoft on Monday revealed that its Azure cloud platform mitigated a 2.4 Tbps distributed denial-of-service (DDoS) attack in the last week of August targeting an unnamed customer in Europe, surpassing a 2.3 Tbps attack stopped by Amazon Web Services … Continue reading Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers