Collaborate Disseminate
DNC officials and Lookout believed a spoofed site was built to harvest authentication details for the Democratic voter database. Continue reading DNC: Highly Publicized ‘Phishing Attempt’ Was Only a Security Test
The DNC thwarts a phishing effort aimed at its voter database, days after Microsoft’s Fancy Bear disruption and Facebook’s efforts against Iranian propaganda. Continue reading DNC Becomes Latest Target in Series of Election-Season Attacks
With an OS design based on a verified microkernel, researchers contend almost all Linux OS flaws could be mitigated to less than critical severity. Continue reading Researchers Blame ‘Monolithic’ Linux Code Base for Critical Vulnerabilities
The spyware’s surveillance capabilities are extensive, logging every call, text, photo, video and more, and sending the data to the attackers. Continue reading Triout Malware Carries Out Extensive, Targeted Android Surveillance
The highly sophisticated operation shares code with the Hermes malware, and may be linked to the Lazarus Group APT actor. Continue reading Ryuk Ransomware Emerges in Highly Targeted, Highly Lucrative Campaign
Attackers can abuse URL requests processed by an email program for Mac to steal files from the victim — sometimes without user interaction. Continue reading Airmail 3 Exploit Instantly Steals Info from Apple Users
An unpatched buffer overflow flaw allows remote attackers to completely take over the device and enter the home network. Continue reading Belkin IoT Smart Plug Flaw Allows Remote Code Execution in Smart Homes
An attacker could escalate privileges on the server, further penetrating the network, harvesting customer information or mounting credible social-engineering campaigns. Continue reading Canadian Telcos Patch an APT-Ready Flaw in Disability Services
This could mark yet another reinvention for the VenusLocker group, which has mostly been focused on cryptomining this year. Continue reading GandCrab’s Rotten EGGs Hatch Ransomware in South Korea
The unpatched flaw would allow a bad actor to execute information-exfiltrating malware, backdoors, ransomware or any other kind of bad code he or she chose. Continue reading Philips Vulnerability Exposes Sensitive Cardiac Patient Information