Collaborate Disseminate
An emerging threat actor likely supporting Iranian national interests has been behind a password spraying campaign targeting US, EU, and Israeli defense technology companies, with additional activity observed against regional ports of entry in the Pers… Continue reading Microsoft Warns of Iran-Linked Hackers Targeting US and Israeli Defense Firms
Ukrainian law enforcement authorities on Monday disclosed the arrest of a hacker responsible for the creation and management of a “powerful botnet” consisting of over 100,000 enslaved devices that was used to carry out distributed denial-of-service (DD… Continue reading Ukraine Arrests Operator of DDoS Botnet with 100,000 Compromised Devices
A prominent Togolese human rights defender has been targeted with spyware by a threat actor known for striking victims in South Asia, marking the hacking group’s first foray into digital surveillance in Africa.
Amnesty International tied the covert att… Continue reading Indian-Made Mobile Spyware Targeted Human Rights Activist in Togo
An “aggressive” financially motivated threat actor has been identified as linked to a string of RYUK ransomware attacks since October 2018, while maintaining close partnerships with TrickBot-affiliated threat actors and using a publicly available arsen… Continue reading Ransomware Group FIN12 Aggressively Going After Healthcare Targets
Cybersecurity researchers have detailed a new campaign that likely targets entities in Southeast Asia with a previously unrecognized Linux malware that’s engineered to enable remote access to its operators, in addition to amassing credentials and funct… Continue reading Researchers Warn of FontOnLake Rootkit Malware Targeting Linux Systems
The Apache Software Foundation on Thursday released additional security updates for its HTTP Server product to remediate what it says is an “incomplete fix” for an actively exploited path traversal and remote code execution flaw that it patched earlier… Continue reading New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks
A high-severity code injection vulnerability has been disclosed in 23andMe’s Yamale, a schema and validator for YAML, that could be trivially exploited by adversaries to execute arbitrary Python code.
The flaw, tracked as CVE-2021-38305 (CVSS score: 7…. Continue reading Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects
The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet required cybersecurity requirements in order to safeguard public sector information and infrast… Continue reading New U.S. Government Initiative Holds Contractors Accountable for Cybersecurity
All third-party iOS, iPadOS, and macOS apps that allow users to create an account should also provide a method for terminating their accounts from within the apps beginning next year, Apple said on Wednesday.
“This requirement applies to all app submis… Continue reading Apple now requires all apps to make it easy for users to delete their accounts
Interactive livestreaming platform Twitch acknowledged a “breach” after an anonymous poster on the 4chan messaging board leaked its source code, an unreleased Steam competitor from Amazon Game Studios, details of creator payouts, proprietary software d… Continue reading Twitch Suffers Massive 125GB Data and Source Code Leak Due to Server Misconfiguration