Collaborate Disseminate
Researchers discovered a new, modular banking trojan with ties to Cerberus and Alien that has the capability to become a much larger threat than it is now. Continue reading Xenomorph Malware Burrows into Google Play Users, No Facehugger Required
The resurgent trojan has targeted 60 top companies to harvest credentials for a wide range of applications, with an eye to virulent follow-on attacks. Continue reading TrickBot Ravages Customers of Amazon, PayPal and Other Top Brands
A group of five security vulnerabilities could lead to a range of bad outcomes for virtual-machine enthusiasts, including command execution and DoS. Continue reading Critical VMware Bugs Open ESXi, Fusion & Workstation to Attackers
The vendor issued an emergency fix on Sunday, and eCommerce websites should update ASAP to avoid Magecart card-skimming attacks and other problems. Continue reading Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack
A collection of five security vulnerabilities with a collective CVSS score of 10 out of 10 threaten critical infrastructure environments that use Moxa MXview. Continue reading Critical MQTT-Related Bugs Open Industrial Networks to RCE Via Moxa
The attacks, which lead to 2FA defeat and account takeover, have accelerated by several hundred percent in one year, leading to thousands of drained bank accounts. Continue reading Sharp SIM-Swapping Spike Causes $68M in Losses
The living-off-the-land binary (LOLBin) is anchoring a rash of cyberattacks bent on evading security detection to drop Qbot and Lokibot. Continue reading Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware
Two powerful trojans with spyware and RAT capabilities are being delivered in side-by-side campaigns using a common infrastructure. Continue reading Medusa Malware Joins Flubot’s Android Distribution Network
The ‘smishing’ group lives up to its name, expanding globally and adding image exfiltration to the Wroba RAT it uses to infect mobile victims. Continue reading Roaming Mantis Expands Android Backdoor to Europe
The popular continuous-delivery platform has a path-traversal bug (CVE-2022-24348) that could allow cyberattackers to hop from one application ecosystem to another. Continue reading Argo CD Security Bug Opens Kubernetes Cloud Apps to Attackers