In July 2022, Apple announced a new protection feature for its devices. Called Lockdown Mode, it severely restricts the functionality of your Apple smartphone, tablet or laptop. Its purpose is to reduce the success rate of targeted attacks, which politicians, activists and journalists, among others, are subjected to. show more ...
Microsoft warned against threat actors increasingly using malicious IIS web server extensions to backdoor unpatched Exchange servers. Between January and May, the attackers targeted several servers to access victims' email mailboxes, steal credentials and sensitive data, and run commands. IIS modules are usually not used as backdoors as compared to general web application threats such as web shells.
In its latest report, Vade provided a ranking of the top 25 most impersonated brands in phishing attacks. Microsoft came in at #1 on the list, followed by Facebook. Rounding out the top five are Crédit Agricole, WhatsApp, and Orange.
Since the operation started in 2013, law enforcement states that the developer made 300,000 to 400,000, which was predominantly used to pay for food deliveries and purchase "other consumable and disposable items."
According to researchers, Subzero is similar to Pegasus in functionality and allows attackers to remotely and silently break into a victim’s computer, phone, network infrastructure, and IoT devices.
Some Google Pixel 6a users have reported problems with its in-display fingerprint reader that allows any fingerprint (whether the owner’s or not) to unlock their new phone, raising a security concern.
Experts discovered eerie similarities between LockBit 3.0 and BlackMatter from overlaps in harvesting and privilege escalation routines and the use of anti-debugging and threading to disrupt analysis. There are a couple of major differences as well, but not sufficient to overshadow the probability of two groups show more ...
The hackers connect with professionals on LinkedIn who could have access to Facebook business accounts. This typically includes “digital media” and “digital marketing” roles.
SonicWall recorded 2.8 billion malware hits globally, in H1 2022, marking an 11% rise over 2021. This amounts to an average of 8,240 malware attempts per target. This is the first recorded rise in three years.
The online fraudsters put an effort into promoting the campaigns on various social media platforms or use compromised Facebook and YouTube to reach as many users as possible.
A threat actor that goes online with the moniker Adrastea, and that defines itself as a group of independent cybersecurity specialists and researchers, claims to have hacked MBDA.
Researchers have highlighted new malware campaigns that are targeting MS SQL servers to install proxyware and earn money by sharing their victim’s network bandwidth. Proxyware operators targets MS SQL servers because they are located in corporate networks or data centers with plenty of internet bandwidth.
Microleaves, a ten-year-old proxy service that lets customers route their web traffic through millions of Microsoft Windows computers, recently fixed a vulnerability in their website that exposed their entire user database.
Several cybersecurity experts have shared the message on Twitter and other social media sites warning of the potential fallout from the kind of access the hacker purportedly has.
Ransomware attacks are in decline, according to reports by several cybersecurity companies. After witnessing many high-profile attacks, companies have also been hardening their defenses, putting another obstacle in front of ransomware groups.
The alert is based on the increased number of consumer complaints about unwanted text messages, in recent years it raised from approximately 5,700 in 2019, 14,000 in 2020, 15,300 in 2021, to 8,500 through June 30, 2022
As per a post written by Halborn’s technical education specialist Luis Lubeck, the active phishing campaign used emails to target MetaMask users and trick them into giving out their passphrases.
Back in June of this year, Trend Micro research revealed that 89 percent of electricity, oil & gas, and manufacturing firms have experienced cyberattacks impacting production and energy supply over the past 12 months.
Raccoon is a malware family that has been sold as malware-as-a-service on underground forums since early 2019. In early July 2022, a new variant of this malware dubbed Raccoon Stealer v2 was released.
India’s digital transformation cannot be fashioned on the foundations of decades-old legal infrastructure like the Information Technology Act 2000 and the National Cyber Security Policy 2013, among others.
A research team from dating platform Tinder crafted an automation script that unearthed flaws that enabled the exfiltration of secrets that provide write access to various open source GitHub repositories, including Elastic’s Logstash.
A malicious actor in possession of this information can, therefore, create a Twitter bot army that could be potentially leveraged to spread mis/disinformation on the social media platform.
A security researcher with the handle rgod discovered a flaw in the HttpFile class that results from the lack of proper validation of a user-supplied path prior to using it in file operations.
The ALPHV ransomware gang, aka BlackCat, claimed responsibility for a cyberattack against Creos Luxembourg S.A. last week, a natural gas pipeline and electricity network operator in the central European country.
The US Cybersecurity and Infrastructure Security Agency (CISA) has instructed government organizations — and advised private sector companies — to address a recently disclosed Confluence vulnerability that has been exploited in attacks.
This archive contains all of the 68 exploits added to Packet Storm in July, 2022.
Ubuntu Security Notice 5542-1 - It was discovered that Samba did not handle MaxQueryDuration when being used in AD DC configurations, contrary to expectations. This issue only affected Ubuntu 20.04 LTS. Luke Howard discovered that Samba incorrectly handled certain restrictions associated with changing passwords. A show more ...
Backdoor.Win32.Destrukor.20 malware suffers from an unauthenticated remote command execution vulnerability.
Omnia MPX version 1.5.0+r1 suffers from a path traversal vulnerability.
Red Hat Security Advisory 2022-5770-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.12.0. Issues addressed include a spoofing vulnerability.
NanoCMS version 0.4 suffers from an authenticated remote code execution vulnerability.
Red Hat Security Advisory 2022-5767-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.12.0 ESR. Issues addressed include a spoofing vulnerability.
CuteEditor For PHP version 6.6 suffers from a directory traversal vulnerability.
Backdoor.Win32.Destrukor.20 malware suffers from authentication bypass and code execution vulnerabilities.
mPDF version 7.0 suffers from a local file inclusion vulnerability.
WordPress Duplicator plugin versions 1.4.6 and below suffer from a backup disclosure vulnerability.
WordPress Duplicator plugin versions 1.4.7 and below suffer from an information disclosure vulnerability.
Webmin version 1.996 suffers from an authenticated remote code execution vulnerability.
CodeIgniter CMS version 4.2.0 suffers from a remote SQL injection vulnerability.
Easy Chat Server version 3.1 remote stack buffer overflow exploit.
Wavlink WN530HG4 suffers from a password disclosure vulnerability.
Wavlink WN533A8 suffers from a password disclosure vulnerability.
Wavlink WN533A8 suffers from a cross site scripting vulnerability.
WordPress SeatReg plugin version 1.23.0 suffers from an open redirection vulnerability.
Crime Reporting System version 1.0 suffers from a remote SQL injection vulnerability.
The operators of the Gootkit access-as-a-service (AaaS) malware have resurfaced with updated techniques to compromise unsuspecting victims. "In the past, Gootkit used freeware installers to mask malicious files; now it uses legal documents to trick users into downloading these files," Trend Micro researchers Buddy Tancio and Jed Valderama said in a write-up last week. The findings
A 24-year-old Australian national has been charged for his purported role in the creation and sale of spyware for use by domestic violence perpetrators and child sex offenders. Jacob Wayne John Keen, who currently resides at Frankston, Melbourne, is said to have created the remote access trojan (RAT) when he was 15, in addition to working as the administrator for the tool from 2013 until its
Researchers have uncovered a list of 3,207 apps, some of which can be utilized to gain unauthorized access to Twitter accounts. The takeover is made possible, thanks to a leak of legitimate Consumer Key and Consumer Secret information, respectively, Singapore-based cybersecurity firm CloudSEK said in a report exclusively shared with The Hacker News. "Out of 3,207, 230 apps are leaking all four
Now more than ever, organizations need to enable their development teams to build and grow their security skills. Today organizations face a threat landscape where individuals, well-financed syndicates, and state actors are actively trying to exploit errors in software. Yet, according to recent global research, 67% of developers that were interviewed said they were still shipping code they knew
