Collaborate Disseminate
Numerous Windows machines located in South Korea have been targeted by a botnet tracked as PseudoManuscrypt since at least May 2021 by employing the same delivery tactics of another malware called CryptBot.
“PseudoManuscrypt is disguised as an install… Continue reading PseudoManuscrypt Malware Spreading the Same Way as CryptBot Targets Koreans
Microsoft has warned of emerging threats in the Web3 landscape, including “ice phishing” campaigns, as a surge in adoption of blockchain and DeFi technologies emphasizes the need to build security into the decentralized web while it’s still in its ear… Continue reading Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks
Multiple security vulnerabilities have been disclosed in Canonical’s Snap software packaging and deployment system, the most critical of which can be exploited to escalate privilege to gain root privileges.
Snaps are self-contained application package… Continue reading New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
A “potentially destructive actor” aligned with the government of Iran is actively exploiting the well-known Log4j vulnerability to infect unpatched VMware Horizon servers with ransomware.
Cybersecurity firm SentinelOne dubbed the group “TunnelVision” … Continue reading Iranian Hackers Targeting VMware Horizon Log4j Flaws to Deploy Ransomware
Cisco has released security updates to contain three vulnerabilities affecting its products, including one high-severity flaw in its Email Security Appliance (ESA) that could result in a denial-of-service (DoS) condition on an affected device.
The wea… Continue reading Attackers Can Crash Cisco Email Security Appliances by Sending Malicious Emails
Adobe on Thursday updated its advisory for an actively exploited zero-day affecting Adobe Commerce and Magento Open Source to patch a newly discovered flaw that could be weaponized to achieve arbitrary code execution.
<!–adsense–>
Tracked as C… Continue reading Another Critical RCE Discovered in Adobe Commerce and Magento Platforms
Google on Wednesday announced plans to bring its Privacy Sandbox initiatives to Android in a bid to expand its privacy-focused, but also less disruptive, advertising technology beyond the desktop web.
To that end, the internet giant said it will work … Continue reading Google Bringing Privacy Sandbox to Android to Limit Sharing of User Data
State-sponsored actors backed by the Russian government regularly targeted the networks of several U.S. cleared defense contractors (CDCs) to acquire proprietary documents and other confidential information pertaining to the country’s defense and inte… Continue reading U.S. Says Russian Hackers Stealing Sensitive Data from Defense Contractors
The practice of blurring out text using a method called pixelation may not be as secure as previously thought.
While the most foolproof way of concealing sensitive textual information is to use opaque black bars, other redaction methods like pixelatio… Continue reading This New Tool Can Retrieve Pixelated Text from Redacted Documents
Cybersecurity researchers have unpacked a nascent Golang-based botnet called Kraken that’s under active development and features an array of backdoor capabilities to siphon sensitive information from compromised Windows hosts.
“Kraken already features… Continue reading Researchers Warn of a New Golang-based Botnet Under Continuous Development