Collaborate Disseminate
Network-attached storage (NAS) appliance maker QNAP on Monday warned of a recently disclosed Linux vulnerability affecting its devices that could be abused to elevate privileges and gain control of affected systems.
“A local privilege escalation vulne… Continue reading ‘Dirty Pipe’ Linux Flaw Affects a Wide Range of QNAP NAS Devices
French video game company Ubisoft on Friday confirmed it was a victim of a “cyber security incident,” causing temporary disruptions to its games, systems, and services.
The Montreuil-headquartered firm said that an investigation into the breach was un… Continue reading Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords
A Russian-speaking ransomware outfit likely targeted an unnamed entity in the gambling and gaming sector in Europe and Central America by repurposing custom tools developed by other APT groups like Iran’s MuddyWater, new research has found.
The unusua… Continue reading Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups
A newly disclosed security flaw in the Linux kernel could be leveraged by a local adversary to gain elevated privileges on vulnerable systems to execute arbitrary code, escape containers, or induce a kernel panic.
Tracked as CVE-2022-25636 (CVSS score… Continue reading New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access
New findings released last week showcase the overlapping source code and techniques between the operators of Shamoon and Kwampirs, indicating that they “are the same group or really close collaborators.”
“Research evidence shows identification of co-e… Continue reading Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers
Multiple security vulnerabilities have been disclosed in popular package managers that, if potentially exploited, could be abused to run arbitrary code and access sensitive information, including source code and access tokens, from compromised machine… Continue reading Multiple Security Flaws Discovered in Popular Software Package Managers
The Russian government has established its own TLS certificate authority (CA) to address issues with accessing websites that have arisen in the wake of sanctions imposed by the west following the country’s unprovoked military invasion of Ukraine.
Acco… Continue reading Russian Pushing New State-run TLS Certificate Authority to Deal With Sanctions
Meta Platforms’ WhatsApp and Cloudflare have banded together for a new initiative called Code Verify to validate the authenticity of the messaging service’s web app on desktop computers.
Available in the form of a Chrome and Edge browser extension, th… Continue reading Here’s How to Find if WhatsApp Web Code on Your Browser Has Been Hacked
The Iranian state-sponsored threat actor known as MuddyWater has been attributed to a new swarm of attacks targeting Turkey and the Arabian Peninsula with the goal of deploying remote access trojans (RATs) on compromised systems.
“The MuddyWater super… Continue reading Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign
Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm, and stage speculative execution attacks such as Spectre to leak sensitive information from host me… Continue reading New Exploit Bypasses Existing Spectre-V2 Mitigations in Intel, AMD, Arm CPUs