Collaborate Disseminate
Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up in the device’s wallet.
“An attacker only… Continue reading Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones
A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems.
Attacks mounted by the hack… Continue reading Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users
In yet another indicator of how hacking groups are quick to capitalize on world events and improvise their attack campaigns for maximum impact, threat actors have been discovered impersonating Amnesty International to distribute malware that purports t… Continue reading Beware of Fake Amnesty International Antivirus for Pegasus that Hacks PCs with Malware
Google on Thursday pushed urgent security fixes for its Chrome browser, including a pair of new security weaknesses that the company said are being exploited in the wild, making them the fourth and fifth actively zero-days plugged this month alone.
The… Continue reading Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws
Cybersecurity researchers have disclosed an unpatched security vulnerability in the protocol used by Microsoft Azure Active Directory that potential adversaries could abuse to stage undetected brute-force attacks.
“This flaw allows threat actors to per… Continue reading New Azure AD Bug Lets Hackers Brute-Force Passwords Without Getting Caught
Cybersecurity researchers on Wednesday disclosed a previously undocumented backdoor likely designed and developed by the Nobelium advanced persistent threat (APT) behind last year’s SolarWinds supply chain attack, joining the threat actor’s ever-expand… Continue reading New Tomiris Backdoor Found Linked to Hackers Behind SolarWinds Cyberattack
Russian authorities on Wednesday arrested and detained Ilya Sachkov, the founder of cybersecurity firm Group-IB, for two months in Moscow on charges of state treason following a search of its office on September 28.
The Russian company, which is headqu… Continue reading Cybersecurity Firm Group-IB’s CEO Arrested Over Treason Charges in Russia
Facebook on Wednesday announced it’s open-sourcing Mariana Trench, an Android-focused static analysis platform the company uses to detect and prevent security and privacy bugs in applications created for the mobile operating system at scale.
“[Mariana … Continue reading Facebook Releases New Tool That Finds Security and Privacy Bugs in Android Apps
A newly discovered “aggressive” mobile campaign has infected north of 10 million users from over 70 countries via seemingly innocuous Android apps that subscribe the individuals to premium services costing €36 (~$42) per month without their knowledge.
… Continue reading Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users
Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil’s instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances into another … Continue reading Hackers Targeting Brazil’s PIX Payment System to Drain Users’ Bank Accounts