Collaborate Disseminate
Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year.
The up… Continue reading Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices
An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by setting its sights on older vulnerabilities, while simultaneously latching on to a variety of… Continue reading Microsoft Warns of LemonDuck Malware Targeting Windows and Linux Systems
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack a… Continue reading New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains
Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what’s … Continue reading Dutch Police Arrest Two Hackers Tied to “Fraud Family” Cybercrime Ring
A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sensitive data stored in a variety of apps, including apps such as Google Chrome and Telegram, a… Continue reading Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software
Nearly three weeks after Florida-based software vendor Kaseya was hit by a widespread supply-chain ransomware attack, the company on Thursday said it obtained a universal decryptor to unlock systems and help customers recover their data.
<!–adsense… Continue reading Kaseya Gets Universal Decryptor to Help REvil Ransomware Victims
An advanced persistent threat (APT) actor has been tracked in a new campaign deploying Android malware via the Syrian e-Government Web Portal, indicating an upgraded arsenal designed to compromise victims.
“To the best of our knowledge, this is the fir… Continue reading APT Hackers Distributed Android Trojan via Syrian e-Government Portal
Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system.
Chief among them is CVE-2019-272… Continue reading Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws
A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts.
Joseph O’Connor, 22, has been charged with intentionally accessing… Continue reading Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam
A software package available from the official NPM repository has been revealed to be actually a front for a tool that’s designed to steal saved passwords from the Chrome web browser.
The package in question, named “nodejs_net_server” and downloaded ov… Continue reading Malicious NPM Package Caught Stealing Users’ Saved Passwords From Browsers