Collaborate Disseminate
The flaw affected all versions of Microsoft Office, Microsoft Windows and architecture types dating back to 2000, and was patched in November 2017. Continue reading Microsoft Warns of Email Attacks Executing Code Using an Old Bug
A botnet has appeared that has attempted to brute-force 1.5 million RDP connections to Windows systems in the last few days — and counting. Continue reading Forget BlueKeep: Beware the GoldBrute
One in four underground merchants offer advanced hacking services, once reserved for APTs and well-funded organized crime gangs. Continue reading Threatlist: Targeted Espionage-as-a-Service Takes Hold on the Dark Web
OPKO subsidiary BioReference joins Quest and LabCorp in the supply-chain incident. Continue reading AMCA Healthcare Hack Widens Again, Reaching 20.1M Victims
Critical bugs impact a widely deployed streaming platform, common in the U.S. and elsewhere. Continue reading Streaming Video Fans Open to TV Hijacking
The vulnerable kits also offer a point of entry to compromise legitimate website servers. Continue reading Buggy Phishing Kits Allow Criminals to Cannibalize Their Own
The mobile ad plugin, found in hundreds of Google Play apps, uses well-honed techniques from malware development to hide itself. Continue reading 440 Million Android Users Plagued By Extremely Obnoxious Pop-Ups
A working exploit for the critical remote code-execution flaw shows how an unauthenticated attacker can achieve full run of a victim machine in about 22 seconds. Continue reading BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover
The login scheme promises it won’t share data — and will be required for all developers using third-party sign-ins. Continue reading Is ‘Sign in with Apple’ Marketing Spin or Privacy Magic? Experts Weigh In
0patch has released an interim micropatch for the dangerous LPE bug while we wait for Microsoft’s official patch. Continue reading Zero-Day No More: Windows Bug Gets a Fix