Old WordPress Plugin Being Exploited in RCE Attacks
Old instances of the popular WordPress Duplicator Plugin are leaving sites open to remote code execution attacks. Continue reading Old WordPress Plugin Being Exploited in RCE Attacks
Author Archives: Tom Spring
Microsoft Patches Three Actively Exploited Bugs as Part of Patch Tuesday
Microsoft’s September Patch Tuesday release tackles three vulnerabilities actively being exploited in the wild. Continue reading Microsoft Patches Three Actively Exploited Bugs as Part of Patch Tuesday
Apple Finally Boots Sneaky Adware Doctor App from Mac App Store
Hours after researchers publicly disclosed an app that was caught stealing and uploading browser history data, Apple removed it from the Mac App Store. Continue reading Apple Finally Boots Sneaky Adware Doctor App from Mac App Store
Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
A macOS App called Adware Doctor blocks ads, but share’s user browser history with a China-based domain. Continue reading Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
The Vulnerability Disclosure Process: Still Broken
Despite the advent to bug bounty programs and enlightened vendors, researchers still complain of abuse, threats and lawsuits. Continue reading The Vulnerability Disclosure Process: Still Broken
‘CamuBot’ Banking Malware Ups the Trojan Game with Biometric Bypass
CamuBot is a unique malware targeting Brazilian bank customers that attempts to bypass biometric account protections. Continue reading ‘CamuBot’ Banking Malware Ups the Trojan Game with Biometric Bypass
BusyGasper Malware Packs a Simple but Potent Punch
BusyGasper is rudimentary spyware with a bevy of novel twists that is highly effective at collecting and exfiltrating data from Android phones. Continue reading BusyGasper Malware Packs a Simple but Potent Punch
Crashing Mobile Apps Capture Screens, Leak Private Data
Several developer tools capture a screen as an app crashes and send it to a third-party server creating a risk of corporate data leakage. Continue reading Crashing Mobile Apps Capture Screens, Leak Private Data
ThreatList: Ransomware Attacks Down, Fileless Malware Up in 2018
The first half of 2018 saw an uptick in fileless malware attacks and a downturn in ransomware attacks, for now. Continue reading ThreatList: Ransomware Attacks Down, Fileless Malware Up in 2018