Collaborate Disseminate
A previously undocumented backdoor has been observed targeting Linux systems with the goal of corralling the machines into a botnet and acting as a conduit for downloading and installing rootkits.
Qihoo 360’s Netlab security team called it B1txor20 “b… Continue reading New “B1txor20” Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw
The maintainers of OpenSSL have shipped patches to resolve a high-severity security flaw in its software library that could lead to a denial-of-service (DoS) condition when parsing certificates.
Tracked as CVE-2022-0778 (CVSS score: 7.5), the issue st… Continue reading New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint advisory warning that Russia-backed threat actors hacked the network of an unnamed non-governmental entity by exploiti… Continue reading FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug
Researchers have disclosed an unpatched security vulnerability in “dompdf,” a PHP-based HTML to PDF converter, that, if successfully exploited, could lead to remote code execution in certain configurations.
“By injecting CSS into the data processed by… Continue reading Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters
Russian cybersecurity firm Kaspersky on Tuesday responded to an advisory released by Germany’s Federal Office of Information Security (BSI) against using the company’s security solutions in the country over “doubts about the reliability of the manufac… Continue reading German Government Warns Against Using Russia’s Kaspersky Antivirus Software
Researchers have disclosed seven new security vulnerabilities in an open-source database management system solution called ClickHouse that could be weaponized to crash the servers, leak memory contents, and even lead to the execution of arbitrary code… Continue reading Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data
The Irish Data Protection Commission (DPC) on Tuesday slapped Facebook and WhatsApp owner Meta Platforms a fine of €17 million (~$18.6 million) for a series of security lapses that occurred in violation of the European Union’s GDPR laws in the region…. Continue reading Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018
As many as 722 ransomware attacks were observed during the fourth quarter of 2021, with LockBit 2.0, Conti, PYSA, Hive, and Grief emerging as the most prevalent strains, according to new research published by Intel 471.
The attacks mark an increase of… Continue reading Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021
Two weeks after details emerged about a second data wiper strain delivered in attacks against Ukraine, yet another destructive malware has been detected amid Russia’s continuing military invasion of the country.
Slovak cybersecurity company ESET dubbe… Continue reading CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks
A number of websites belonging to the Israeli government were felled in a distributed denial-of-service (DDoS) attack on Monday, rendering the portals inaccessible for a short period of time.
“In the past few hours, a DDoS attack against a communicati… Continue reading Massive DDoS Attack Knocked Israeli Government Websites Offline