Collaborate Disseminate
Google Project Zero researchers are warning of two critical remote code vulnerabilities in popular versions of uTorrent’s web-based BitTorrent client and its uTorrent Classic desktop client. Continue reading uTorrent Users Warned of Remote Code Execution Vulnerability
Researchers are warning users about the Coldroot remote access Trojan that is going undetected by AV engines and targets MacOS computers. Continue reading Year-Old Coldroot RAT Targets MacOS, Still Evades Detection
Apple said it is working on a fix for the latest text bomb bug that crashes a number of iOS and Mac apps that display specific Telugu language characters. Continue reading Apple Rushes Fix for Latest ‘Text Bomb’ Bug As Abuse Spreads
Malicious e-mail attachments used in this campaign don’t display any warnings when opened and silently install malware. Continue reading Word-based Malware Attack Doesn’t Use Macros
Attacks include a hard-coded password vulnerability that could give attackers unauthorized access to systems. Continue reading Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems
Emails try to get recipients to share revealing photos of themselves so scammers can later extort them later. Continue reading Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day
Lenovo issued a security bulletin Friday warning customers of two previously disclosed critical Broadcom vulnerabilities impacts 25 models of its popular ThinkPad laptops. Continue reading Lenovo Warns Critical WiFi Vulnerability Impacts Dozens of ThinkPad Models
Apple said the leak of its iBoot source code will have little to no impact on iOS device security. Continue reading Apple Downplays Impact of iBoot Source Code Leak
Researchers have identified a new ransomware strain that went undetected by built-in malware protection used by cloud heavyweights Microsoft and Google as recently as January. Continue reading Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say
Researchers have found a new covert data exchange technique that abuses the TLS protocol that can circumvent traditional network perimeter protections. Continue reading Covert Data Channel in TLS Dodges Network Perimeter Protection