Collaborate Disseminate
Several government agencies in Latin America were targeted in ransomware attacks in the past months, and the latest victims are Chile and the Dominican Republic.
read more Continue reading Ransomware Attacks Target Government Agencies in Latin America
Apple on Wednesday started shipping patches for older iPhone and iPad devices to address a recent, actively exploited vulnerability.
Tracked as CVE-2022-32893, the vulnerability impacts WebKit and it can be exploited to achieve arbitrary code execution… Continue reading iOS 12 Update for Older iPhones Patches Exploited Vulnerability
ndpoint security company McAfee warns of five malicious Chrome extensions designed to track users’ browsing activity and inject code into ecommerce platforms.
read more Continue reading 1.4 Million Users Install Chrome Extensions That Inject Code Into eCommerce Sites
Researchers at Georgia Institute of Technology have identified malicious plugins on tens of thousands of WordPress websites.
read more Continue reading Malicious Plugins Found on 25,000 WordPress Websites: Study
A threat group linked to the Iranian government appears to be the first to exploit the Log4Shell vulnerability in SysAid applications for initial access to the targeted organizations.
read more Continue reading Iranian Government Hackers Exploit Log4Shell in SysAid Apps for Initial Access
Cybersecurity company Trend Micro is raising the alarm on a new ransomware family called Agenda, which has been used in attacks on organizations in Asia and Africa.
Written in the Golang (Go) cross-platform programming language, the threat has the abil… Continue reading New ‘Agenda’ Ransomware Customized for Each Victim
Elon Musk’s lawyers jumped Wednesday on the revelations of a Twitter whistleblower to try to force the platform to surrender vast amounts of information for their fight to cancel the billionaire’s buyout bid.
read more Continue reading Musk Lawyers Seize on Twitter Whistleblower Revelations
Microsoft this week published technical details on ‘MagicWeb’, a new post-exploitation tool used by Russia-linked cyberespionage group APT29.
read more Continue reading Microsoft Details New Post-Compromise Malware Used by Russian Cyberspies
Data collected by IBM shows that old and inconspicuous vulnerabilities affecting industrial products are commonly targeted in scanning activity seen by organizations that use operational technology (OT). SecurityWeek has talked to several experts to fi… Continue reading Old, Inconspicuous Vulnerabilities Commonly Targeted in OT Scanning Activity
Russian cybersecurity firm Doctor Web has identified multiple backdoors on the system partitions of several Android devices that are counterfeit versions of popular phones.
read more Continue reading Backdoors Found on Counterfeit Android Phones