Two Florida Cities Paid $1.1 Million to Ransomware Hackers This Month

In the last two weeks, Florida has paid more than $1.1 million in bitcoin to cybercriminals to recover encrypted files from two separate ransomware attacks—one against Riviera Beach and the other against Lake City.

Lake City, a city in northern Florid… Continue reading Two Florida Cities Paid $1.1 Million to Ransomware Hackers This Month→

‘Legit Apps Turned into Spyware’ Targeting Android Users in Middle East

Cybersecurity researchers are warning about an ongoing Android malware campaign that has been active since 2016 and was first publicly reported in August 2018.

Dubbed “ViceLeaker” by researchers at Kaspersky, the campaign has recently been found targe… Continue reading ‘Legit Apps Turned into Spyware’ Targeting Android Users in Middle East→

New Mac Malware Exploits GateKeeper Bypass Bug that Apple Left Unpatched

Cybersecurity researchers from Intego are warning about possible active exploitation of an unpatched security vulnerability in Apple’s macOS Gatekeeper security feature details and PoC for which were publicly disclosed late last month.

Intego team las… Continue reading New Mac Malware Exploits GateKeeper Bypass Bug that Apple Left Unpatched→

OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

In recent years, several groups of cybersecurity researchers have disclosed dozens of memory side-channel vulnerabilities in modern processors and DRAMs, like Rowhammer, RAMBleed, Spectre, and Meltdown.

Have you ever noticed they all had at least one … Continue reading OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks→

Firefox 67.0.4 Released — Mozilla Patches Second 0-Day Flaw This Week

Okay, folks, it’s time to update your Firefox web browser once again—yes, for the second time this week.

After patching a critical actively-exploited vulnerability in Firefox 67.0.3 earlier this week, Mozilla is now warning millions of its users about… Continue reading Firefox 67.0.4 Released — Mozilla Patches Second 0-Day Flaw This Week→

This Cryptomining Malware Launches Linux VMs On Windows and macOS

Cybersecurity researchers from at least two firms today unveiled details of a new strain of malware that targets Windows and macOS systems with a Linux-based cryptocurrency mining malware.

It may sound strange, but it’s true.

Dubbed “LoudMiner” and a… Continue reading This Cryptomining Malware Launches Linux VMs On Windows and macOS→

Tor Browser 8.5.2 Released — Update to Fix Critical Firefox Vulnerability

Important Update (21 June 2019) ➤ The Tor Project on Friday released second update (Tor Browser 8.5.3) for its privacy web-browser that patches the another Firefox zero-day vulnerability patched this week.

Following the latest critical update for Fire… Continue reading Tor Browser 8.5.2 Released — Update to Fix Critical Firefox Vulnerability→

New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now

Oracle has released an out-of-band emergency software update to patch a newly discovered critical vulnerability in the WebLogic Server.

According to Oracle, the vulnerability—which can be identified as CVE-2019-2729 and has a CVSS score of 9.8 out of … Continue reading New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now→

Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks

Important Update [21 June 2019]—Mozilla on Thursday released another update Firefox version 67.0.4 to patch a second zero-day vulnerability.

If you use the Firefox web browser, you need to update it right now.

Mozilla earlier today released Firefox 6… Continue reading Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks→