Collaborate Disseminate
BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing. Continue reading BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware
North Korean group UNC1069 targets Node.js maintainers using fake LinkedIn and Slack profiles to spread malware and compromise open source packages. Continue reading UNC1069 Targets Node.js Maintainers via Fake LinkedIn, Slack Profiles
Cybersecurity researchers at Sublime Security have discovered a new scam that uses realistic, interactive JavaScript-based Zoom meeting invites to trick users into installing malware. Continue reading New Fake Zoom Meeting Invite Scam Spreads Malware on Windows PCs
Critical- and high-severity flaws could be exploited to execute arbitrary shell commands or elevate privileges.
The post Splunk, Zoom Patch Severe Vulnerabilities appeared first on SecurityWeek.
Continue reading Splunk, Zoom Patch Severe Vulnerabilities
A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks Continue reading Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware
Fake Zoom and Google Meet pages trick users into installing a monitoring software on Windows systems through phishing links and fake updates. Continue reading Fake Zoom and Google Meet Pages Trick Users Into Installing Monitoring Tool
Malwarebytes researchers have uncovered a fake (but convincing) Zoom meeting page that downloads surveillance software on Windows computers and tricks users into running it. According to Microsoft MVP Steven Lim, the page has claimed nearly 1,500 victi… Continue reading Fake Zoom meeting leads to silent install of surveillance software
Both platforms serve as backbone infrastructure for remote work and software development, making these flaws particularly dangerous for business continuity.
The post Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities appeared first on TechR… Continue reading Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities
Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs.
The post Atlassian, GitLab, Zoom Release Security Patches appeared first on SecurityWeek.
Continue reading Atlassian, GitLab, Zoom Release Security Patches
A critical Zoom vulnerability put Windows users at risk of data theft and system compromise. Zoom has patched the flaw. Users should update immediately.
The post Windows Users at Risk as Critical Zoom Vulnerability Exploited appeared first on TechRepub… Continue reading Windows Users at Risk as Critical Zoom Vulnerability Exploited