Collaborate Disseminate
Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks against any target, surpassing many of the existing UDP-based… Continue reading Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks
A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple’s on-device malware scanner and even signed by its own notarization servi… Continue reading New AdLoad Variant Bypasses Apple’s Security Defenses to Target macOS Systems
Security researchers have disclosed as many as 40 different vulnerabilities associated with an opportunistic encryption mechanism in mail clients and servers that could open the door to targeted man-in-the-middle (MitM) attacks, permitting an intruder … Continue reading Dozens of STARTTLS Related Flaws Found Affecting Popular Email Clients
A novel technique leverages optical emanations from a device’s power indicator LED to recover sounds from connected peripherals and spy on electronic conversations from a distance of as much as 35 meters.
Dubbed the “Glowworm attack,” the findings were… Continue reading New Glowworm Attack Recovers Device’s Sound from Its LED Power Indicator
Facebook on Friday said it’s extending end-to-end encryption (E2EE) for voice and video calls in Messenger, along with testing a new opt-in setting that will turn on end-to-end encryption for Instagram DMs.
“The content of your messages and calls in an… Continue reading Facebook Adds End-to-End Encryption for Audio and Video Calls in Messenger
Microsoft has disclosed details of an evasive year-long social engineering campaign wherein the operators kept changing their obfuscation and encryption mechanisms every 37 days on average, including relying on Morse code, in an attempt to cover their … Continue reading Hackers Spotted Using Morse Code in Phishing Attacks to Evade Detection
Threat actors are actively carrying out opportunistic scanning and exploitation of Exchange servers using a new exploit chain leveraging a trio of flaws affecting on-premises installations, making them the latest set of bugs after ProxyLogon vulnerabil… Continue reading Hackers Actively Searching for Unpatched Microsoft Exchange Servers
Ransomware operators such as Magniber and Vice Society are actively exploiting vulnerabilities in Windows Print Spooler to compromise victims and spread laterally across a victim’s network to deploy file-encrypting payloads on targeted systems.
“Multip… Continue reading Ransomware Gangs Exploiting Windows Print Spooler Vulnerabilities
A nascent information-stealing malware sold and distributed on underground Russian underground forums has been written in Rust, signalling a new trend where threat actors are increasingly adopting exotic programming languages to bypass security protect… Continue reading Experts Shed Light On New Russian Malware-as-a-Service Written in Rust
Global IT consultancy giant Accenture has become the latest company to be hit by the LockBit ransomware gang, according to a post made by the operators on their dark web portal, likely filling a void left in the wake of DarkSide and REvil shutdown.
“Th… Continue reading IT Giant Accenture Hit by LockBit Ransomware; Hackers Threaten to Leak Data