Collaborate Disseminate
Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller (PLC) platform that could be remotely exploited to take control of a company’s cloud ope… Continue reading Several New Critical Flaws Affect CODESYS Industrial Automation Software
A popular malware known for stealing sensitive information from Windows machines has evolved into a new strain capable of also targeting Apple’s macOS operating system.
The upgraded malware, dubbed “XLoader,” is a successor to another well-known Window… Continue reading XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems
Microsoft’s Windows 10 and the upcoming Windows 11 versions have been found vulnerable to a new local privilege escalation vulnerability that permits users with low-level permissions access Windows system files, in turn, enabling them to unmask the ope… Continue reading New Windows and Linux Flaws Give Attackers Highest System Privileges
Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetected since 2005.
Tracked as CVE-2021-3438 (CVSS score: 8.8), the issue concerns a buffer overf… Continue reading 16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers
Cybersecurity researchers on Tuesday lifted the lid on a previously undocumented malware strain dubbed “MosaicLoader” that singles out individuals searching for cracked software as part of a global campaign.
“The attackers behind MosaicLoader created a… Continue reading This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection
The U.S. government and its key allies, including the European Union, the U.K., and NATO, formally attributed the massive cyberattack against Microsoft Exchange email servers to state-sponsored hacking crews working affiliated with the People’s Republi… Continue reading US and Global Allies Accuse China of Massive Microsoft Exchange Attack
A threat group likely based in Romania and active since at least 2020 has been behind an active cryptojacking campaign targeting Linux-based machines with a previously undocumented SSH brute-forcer written in Golang.
Dubbed “Diicot brute,” the password… Continue reading Researchers Warn of Linux Cryptojacking Attackers Operating from Romania
The Wi-Fi network name bug that was found to completely disable an iPhone’s networking functionality had remote code execution capabilities and was silently fixed by Apple earlier this year, according to new research.
The denial-of-service vulnerabilit… Continue reading Turns Out That Low-Risk iOS Wi-Fi Naming Bug Can Hack iPhones Remotely
A sweeping probe into a data leak of more than 50,000 phone numbers has revealed an extensive misuse of Israeli company NSO Group’s Pegasus “military-grade spyware” to facilitate human rights violations by surveilling heads of state, activists, journal… Continue reading New Leak Reveals Abuse of Pegasus Spyware to Target Journalists Globally
Merely days after Microsoft sounded the alarm on an unpatched security vulnerability in the Windows Print Spooler service, possibly yet another zero-day flaw in the same component has come to light, making it the fourth printer-related shortcoming to b… Continue reading Researcher Uncovers Yet Another Unpatched Windows Printer Spooler Vulnerability