Collaborate Disseminate
The Kimsuky/Hidden Cobra APT is going after the commercial sector, according to CISA. Continue reading North Korea-Backed Spy Group Poses as Reporters in Spearphishing Attacks, Feds Warn
Popular chat apps, including LINE, Slack, Twitter DMs and others, can also leak location data and share private info with third-party servers. Continue reading LinkedIn, Instagram Vulnerable to Preview-Link RCE Security Woes
The flaw (CVE-2020-15157) is located in the container image-pulling process. Continue reading Containerd Bug Exposes Cloud Account Credentials
Multiple chicken diners said their usernames and passwords were stolen and the accounts used to place high-volume orders. Continue reading Nando’s Hackers Feast on Customer Accounts
An investigation showed a custom backdoor RAT and the Emotet trojan in the networks of municipal victims of the attacks. Continue reading Louisiana Calls Out National Guard to Fight Ransomware Surge
Dr. Reddy’s, the contractor for Russia’s “Sputinik V” COVID-19 vaccine and a major generics producer, has had to close plants and isolate its data centers. Continue reading COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach
An elaborate set of redirections and hundreds of URLs make up a wide-ranging tech-support scam. Continue reading Facebook, News and XSS Underpin Complex Browser Locker Attack
The Feds have published a Top 25 exploits list, rife with big names like BlueKeep, Zerologon and other notorious security vulnerabilities. Continue reading Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
The ransomware gang claims to have bought network access to the bookseller’s systems before encrypting the networks and stealing “financial and audit data.” Continue reading Egregor Claims Responsibility for Barnes & Noble Attack, Leaks Data
The out-of-band patches follow a lighter-than-usual Patch Tuesday update earlier this month. Continue reading Adobe Fixes 16 Critical Code-Execution Bugs Across Portfolio