Collaborate Disseminate
Users searching for TeamViewer remote desktop software on search engines like Google are being redirected to malicious links that drop ZLoader malware onto their systems while simultaneously embracing a stealthier infection chain that allows it to ling… Continue reading New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads
Cybersecurity researchers on Tuesday disclosed details about a high-severity flaw in the HP OMEN driver software that impacts millions of gaming computers worldwide, leaving them open to an array of attacks.
Tracked as CVE-2021-3437 (CVSS score: 7.8), … Continue reading HP OMEN Gaming Hub Flaw Affects Millions of Windows Computers
Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 to fix two actively exploited vulnerabilities, one of which defeated extra security protections built into the operating system.
The list of two flaws is as … Continue reading Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware
Google on Monday released security updates for Chrome web browser to address a total of 11 security issues, two of which it says are actively exploited zero-days in the wild.
<!–adsense–>
Tracked as CVE-2021-30632 and CVE-2021-30633, the vulner… Continue reading Update Google Chrome to Patch 2 New Zero-Day Flaws Under Attack
Researchers on Monday took the wraps off a newly discovered Linux and Windows re-implementation of Cobalt Strike Beacon that’s actively set its sights on government, telecommunications, information technology, and financial institutions in the wild.
Th… Continue reading Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide
A widely used NPM package called ‘Pac-Resolver’ for the JavaScript programming language has been remediated with a fix for a high-severity remote code execution vulnerability that could be abused to run malicious code inside Node.js applications whenev… Continue reading Critical Bug Reported in NPM Package With Millions of Downloads Weekly
A newly discovered side-channel attack demonstrated on modern processors can be weaponized to successfully overcome Site Isolation protections weaved into Google Chrome and Chromium browsers and leak sensitive data in a Spectre-style speculative execut… Continue reading New SpookJS Attack Bypasses Google Chrome’s Site Isolation Protection
Russian internet giant Yandex has been the target of a record-breaking distributed denial-of-service (DDoS) attack by a new botnet called Mēris.
The botnet is believed to have pummeled the company’s web infrastructure with millions of HTTP requests, be… Continue reading Mēris Botnet Hit Russia’s Yandex With Massive 22 Million RPS DDoS Attack
WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptograph… Continue reading WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud
A mix of banking applications, cryptocurrency wallets, and shopping apps from the U.S. and Spain are the target of a newly discovered Android trojan that could enable attackers to siphon personally identifiable information from infected devices, includ… Continue reading SOVA: New Android Banking Trojan Emerges With Growing Capabilities