Collaborate Disseminate
A new as-yet unpatched weakness in Apple’s iCloud Private Relay feature could be circumvented to leak users’ true IP addresses from iOS devices running the latest version of the operating system.
Introduced as a beta with iOS 15, which was officially r… Continue reading Apple’s New iCloud Private Relay Service Leaks Users’ Real IP Addresses
Cybersecurity researchers have disclosed a novel technique adopted by a threat actor to deliberately evade detection with the help of malformed digital signatures of its malware payloads.
“Attackers created malformed code signatures that are treated as… Continue reading Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
Networking equipment maker Cisco Systems has rolled out patches to address three critical security vulnerabilities in its IOS XE network operating system that remote attackers could potentially abuse to execute arbitrary code with administrative privil… Continue reading Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software
Apple on Thursday released security updates to fix multiple security vulnerabilities in older versions of iOS and macOS that it says have been detected in exploits in the wild, in addition to expanding patches for a previously plugged security weakness… Continue reading Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days
An unpatched design flaw in the implementation of Microsoft Exchange’s Autodiscover protocol has resulted in the leak of approximately 100,000 login names and passwords for Windows domains worldwide.
“This is a severe security issue, since if an attack… Continue reading Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials
Security researchers have disclosed an unpatched weakness in Microsoft Windows Platform Binary Table (WPBT) affecting all Windows-based devices since Windows 8 that could be potentially exploited to install a rootkit and compromise the integrity of dev… Continue reading A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit
An “insidious” new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of an ongoing campaign that uses SMS text message lures related to COVID-19 regulations and vaccine information in an attempt to steal … Continue reading New Android Malware Targeting US, Canadian Users with COVID-19 Lures
More than one terabyte of data containing 5.5 million files has been left exposed, leaking personal information of over 100,000 customers of a Colombian real estate firm, according to cybersecurity company WizCase.
The breach was discovered by Ata Hakç… Continue reading Colombian Real Estate Agency Leak Exposes Records of Over 100,000 Buyers
Microsoft has opened the lid on a large-scale phishing-as-a-service (PHaaS) operation that’s involved in selling phishing kits and email templates as well as providing hosting and automated services at a low cost, thus enabling cyber actors to purchase… Continue reading Microsoft Warns of a Wide-Scale Phishing-as-a-Service Operation
As many as 11 security vulnerabilities have been disclosed in Nagios network management systems, some of which could be chained to achieve pre-authenticated remote code execution with the highest privileges, as well as lead to credential theft and phis… Continue reading New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures