Collaborate Disseminate
Website security firm Sucuri is warning of an increase in fake distributed denial-of-service (DDoS) protection notifications that lead to the delivery of malware.
DDoS protection notifications are web pages that the browser serves to users when checks … Continue reading Fake DDoS Protection Prompts on Hacked WordPress Sites Deliver RATs
In June 2022, Google mitigated a Layer 7 distributed denial-of-service (DDoS) attack that peaked at 46 million requests per second (RPS).
Disclosed this week, this is the third HTTPS attack this year to reach tens of millions of RPS, after two lower-vo… Continue reading Google Blocks Record-Setting DDoS Attack That Peaked at 46 Million RPS
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a critical SAP vulnerability to its Known Exploited Vulnerabilities Catalog less than one week after its details were disclosed at the Black Hat and Def Con hacker conferences.
re… Continue reading SAP Vulnerability Exploited in Attacks After Details Disclosed at Hacker Conferences
Researchers with cybersecurity company ESET have observed a new macOS malware sample developed by the infamous North Korean advanced persistent threat (APT) actor Lazarus.
read more Continue reading North Korean Hackers Use Fake Job Offers to Deliver New macOS Malware
Secureworks security researchers have analyzed ‘DarkTortilla’, a .NET-based crypter used to deliver both popular malware and targeted payloads.
read more Continue reading Evasive ‘DarkTortilla’ Crypter Delivers RATs, Targeted Malware
A Chrome 104 update announced by Google on Tuesday patches 11 vulnerabilities, including a zero-day that has been exploited in attacks.
read more Continue reading Google Patches Fifth Exploited Chrome Zero-Day of 2022
Security companies have identified more than 20 malicious PyPI packages designed to steal passwords and other sensitive information from the victims’ machines.
read more Continue reading Security Firms Find Over 20 Malicious PyPI Packages Designed for Data Theft
Researchers have shown how hackers could weaponize programmable logic controllers (PLCs) and use them to exploit engineering workstations running software from several major industrial automation companies.
read more Continue reading Weaponized PLCs Can Hack Engineering Workstations in Attacks on Industrial Orgs
China-linked cyberespionage group Iron Tiger was observed using the compromised servers of a chat application for the delivery of malware to Windows and macOS systems, Trend Micro reports.
read more Continue reading Chinese Cyberspies Use Supply Chain Attack to Deliver Windows, macOS Malware