Collaborate Disseminate
A large-scale, automated typosquatting attack saw 200+ malicious packages flood the npm code repository, targeting popular Azure scopes. Continue reading Microsoft Azure Developers Awash in PII-Stealing npm Packages
“Evolving intelligence” shows Russia amping up for cyber-war in response to Ukraine-related sanctions, the White House said — but researchers warn that many orgs are not prepared. Continue reading Russia Lays Groundwork for Cyberattacks on US Infrastructure
The trojanized Craftsart Cartoon Photo Tools app is available in the official Android app store, but it’s actually spyware capable of stealing any and all information from victims’ social-media accounts. Continue reading Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts
The Russian invasion of Ukraine has coincided with the jamming of airplane navigation systems and hacks on the SATCOM networks that empower critical infrastructure. Continue reading Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure
The Russian-speaking APT behind the NotPetya attacks and the Ukrainian power grid takedown could be setting up for additional sinister attacks, researchers said. Continue reading Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet
The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug. Continue reading Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday
Both vulnerabilities are use-after-free issues in Mozilla’s popular web browser. Continue reading Critical Firefox Zero-Day Bugs Allow RCE, Sandbox Escape
Via node-hopping, the espionage tool can reach computers that aren’t even connected to the internet. Continue reading Daxin Espionage Backdoor Ups the Ante on Chinese Malware
Malicious emails warning Microsoft users of “unusual sign-on activity” from Russia are looking to capitalizing on the Ukrainian crisis. Continue reading Microsoft Accounts Targeted by Russian-Themed Credential Harvesting
A pair of bugs in the Snap-owned tracking app reveal phone numbers and allow account hijacking. Continue reading Zenly Social-Media App Bugs Allow Account Takeover