Collaborate Disseminate
Samsung on Monday confirmed a security breach that resulted in the exposure of internal company data, including the source code related to its Galaxy smartphones.
“According to our initial analysis, the breach involves some source code relating to the… Continue reading Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code
As many as seven security vulnerabilities have been disclosed in PTC’s Axeda software that could be weaponized to gain unauthorized access to medical and IoT devices.
Collectively called “Access:7,” the weaknesses – three of which are rated Critical i… Continue reading Critical “Access:7” Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices
Linux distributions are in the process of issuing patches to address a newly disclosed security vulnerability in the kernel that could allow an attacker to overwrite arbitrary data into any read-only files and allow for a complete takeover of affected… Continue reading Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability
Details have been disclosed about a now-addressed critical vulnerability in Microsoft’s Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control.
“This attack could mean full control… Continue reading Microsoft Azure ‘AutoWarp’ Bug Could Have Let Attackers Access Customers’ Accounts
Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain unauthenticated remote code execution with the highest privileges.
The issues reside in TOS,… Continue reading Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking
Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing se… Continue reading Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts
The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to… Continue reading SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store
Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day … Continue reading 2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!
Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel fea… Continue reading New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container
Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
“While ransom DDoS attacks are not new, they app… Continue reading Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks