Collaborate Disseminate
A Monero cryptomining script is spreading in an ongoing campaign using the recently disclosed critical remote command-execution flaw. Continue reading Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild
The campaign is believed to bring in close to $22,000 per month for bad actors. Continue reading Tiny Island Atoll’s Domain Used in Widespread Ad Fraud
Using a known vulnerability, the threat actor is listening to a variety of ports. Continue reading Thousands of MikroTik Routers Hijacked for Eavesdropping
The Magecart group is likely behind the most prolific card-stealing operation seen in the wild to date. Continue reading MagentoCore Card Skimmer Found on Mass Numbers of E-Commerce Sites
Unlike its browser competitors, Firefox will soon start blocking tracking cookies by default in the name of consumer privacy. Continue reading Bucking the Norm, Mozilla to Block Tracking Cookies in Firefox
Only a third believe it would be difficult or impossible to carry out a successful insider attack. Continue reading ThreatList: Security Pros Confident They Could Compromise Their Own Orgs
Armed with the information, adversaries can explore and attack the local WiFi network, or identify and physically track any Android device. Continue reading Android OS API-Breaking Flaw Offers Useful WiFi Data to Bad Actors
The campaign uses double infection points and two command-and-control servers. Continue reading Cobalt Group Targets Banks in Eastern Europe with Double-Threat Tactic
The Qualcomm Life Capsule Datacaptor Terminal Server and the Becton Dickinson Alaris TIVA Syringe Pump allow remote access without authentication. Continue reading Critical Flaws in Syringe Pump, Device Gateways Threaten Patient Safety
Air Canada said 20,000 mobile app users have had passport information exposed; and millions have been affected by a breach at Asian hotel giant Huazhu. Continue reading Travel Breaches Hit Air Canada and Asia-Pac Hotelier