Collaborate Disseminate
Candiru, aka Sourgum, allegedly sells the DevilsTongue surveillance malware to governments around the world. Continue reading Windows 0-Days Used Against Dissidents in Israeli Broker’s Spyware
The popular e-commerce platform for WordPress has started deploying emergency patches. Continue reading Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases
The attackers have spruced up the ‘vncDll’ module used for spying on targets and stealing data. Continue reading Trickbot Malware Rebounds with Virtual-Desktop Espionage Module
The Joker premium billing-fraud malware is back on Google Play in a fresh onslaught, with an updated bag of tricks to evade scanners. Continue reading Updated Joker Malware Floods into Android Apps
The ‘ModiPwn’ bug lays open production lines, sensors, conveyor belts, elevators, HVACs and more that use Schneider Electric PLCs. Continue reading Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers
Jen Easterly, former NSA official and Morgan Stanley vet, will take up the lead at CISA as the ransomware scourge rages on. Continue reading New CISA Director Confirmed, White House Gains Cyber-Director
The bugs allow a range of attacks on websites, including deleting blog pages and remote code execution. Continue reading WordPress File Management Plugin Riddled with Critical Bugs
The high-severity security vulnerabilities allow elevation of privileges, leading to data theft and more. Continue reading Cisco BPA, WSA Bugs Allow Remote Cyberattacks
A global effort to steal information from energy companies is using sophisticated social engineering to deliver Agent Tesla and other RATs. Continue reading Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign
Security vulnerabilities in the ERP platform could allow attackers to tamper with or sabotage victims’ business-critical processes and to intercept data. Continue reading Critical Sage X3 RCE Bug Allows Full System Takeovers