Collaborate Disseminate
Google on Friday shipped an out-of-band security update to address a high severity vulnerability in its Chrome browser that it said is being actively exploited in the wild.
Tracked as CVE-2022-1096, the zero-day flaw relates to a type confusion vulner… Continue reading Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability
The U.S. government on Thursday released a cybersecurity advisory outlining multiple intrusion campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted the energy sector in the U.S. and beyond.
“The [Federal Security… Continue reading U.S. Charges 4 Russian Govt. Employees Over Hacking Critical Infrastructure Worldwide
The City of London Police has arrested seven teenagers between the ages of 16 and 21 for their alleged connections to the prolific LAPSUS$ extortion gang that’s linked to a recent burst of attacks targeting NVIDIA, Samsung, Ubisoft, LG, Microsoft, and… Continue reading 7 Suspected Members of LAPSUS$ Hacker Gang, Aged 16 to 21, Arrested in U.K.
Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds.
“These malicious apps were able to … Continue reading Experts Uncover Campaign Stealing Cryptocurrency from Android and iPhone Users
Google’s Threat Analysis Group (TAG) on Thursday disclosed that it acted to mitigate threats from two distinct government-backed attacker groups based in North Korea that exploited a recently-uncovered remote code execution flaw in the Chrome web brow… Continue reading North Korean Hackers Exploited Chrome Zero-Day to Target Fintech, IT, and Media Firms
A 23-year-old Russian national has been indicted in the U.S. and added to the Federal Bureau of Investigation’s (FBI) Cyber Most Wanted List for his alleged role as the administrator of Marketplace A, a cyber crime forum that sold stolen login credent… Continue reading 23-Year-Old Russian Hacker Wanted by FBI for Running Marketplace of Stolen Logins
A Chinese-speaking advanced persistent threat (APT) has been linked to a new campaign targeting gambling-related companies in South East Asia, particularly Taiwan, the Philippines, and Hong Kong.
Cybersecurity firm Avast dubbed the campaign Operation … Continue reading Chinese APT Hackers Targeting Betting Companies in Southeast Asia
Authentication services provider Okta on Wednesday named Sitel as the third-party linked to a security incident experienced by the company in late January that allowed the LAPSUS$ extortion gang to remotely take over an internal account belonging to a… Continue reading Researchers Trace LAPSUS$ Cyber Attacks to 16-Year-Old Hacker from England
A new large scale supply chain attack has been observed targeting Azure developers with no less than 218 malicious NPM packages with the goal of stealing personal identifiable information.
“After manually inspecting some of these packages, it became a… Continue reading Over 200 Malicious NPM Packages Caught Targeting Azure Developers
VMware on Wednesday released software updates to plug two critical security vulnerabilities affecting its Carbon Black App Control platform that could be abused by a malicious actor to execute arbitrary code on affected installations in Windows system… Continue reading VMware Issues Patches for Critical Flaws Affecting Carbon Black App Control