Source: www.bleepingcomputer.com – Author: Bill Toulas Apple released security updates for older iPhones to fix a zero-day vulnerability tracked as CVE-2023-41064 that was actively exploited to...
Author:
‘Redfly’ hackers infiltrated power supplier’s network for 6 months – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas An espionage threat group tracked as ‘Redfly’ hacked a national electricity grid organization in Asia and quietly maintained access to...
New WiKI-Eve attack can steal numerical passwords over WiFi – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A new attack dubbed ‘WiKI-Eve’ can intercept the cleartext transmissions of smartphones connected to modern WiFi routers and deduce individual...
Iranian hackers backdoor 34 orgs with new Sponsor malware – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A nation-state threat actor known as ‘Charming Kitten’ (Phosphorus, TA453, APT35/42) has been observed deploying a previously unknown backdoor malware...
Facebook Messenger phishing wave targets 100K business accounts per week – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Hackers use a massive network of fake and compromised Facebook accounts to send out millions of Messenger phishing messages to...
‘Evil Telegram’ Android apps on Google Play infected 60K with spyware – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals...
Microsoft Teams phishing attack pushes DarkGate malware – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A new phishing campaign is abusing Microsoft Teams messages to send malicious attachments that install the DarkGate Loader malware. The...
Notepad++ 8.5.7 released with fixes for four security vulnerabilities – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to...
Dymocks Booksellers suffers data breach impacting 836k customers – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Dymocks Booksellers is warning customers their personal information was exposed in a data breach after the company’s database was shared...
Cisco warns of VPN zero-day exploited by ransomware gangs – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Cisco is warning of a CVE-2023-20269 zero-day vulnerability in its Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense...
Cisco BroadWorks impacted by critical authentication bypass flaw – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A critical vulnerability impacting the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow remote attackers...
Google Looker Studio abused in cryptocurrency phishing attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Cybercriminals are abusing Google Looker Studio to create counterfeit cryptocurrency phishing websites that phish digital asset holders, leading to account...
Windows cryptomining attacks target graphic designer’s high-powered GPUs – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Image: Midjourney Cybercriminals are leveraging a legitimate Windows tool called ‘Advanced Installer’ to infect the computers of graphic designers with...
Flipper Zero can be used to launch iOS Bluetooth spam attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The Flipper Zero portable wireless pen-testing and hacking tool can be used to aggressively spam Bluetooth connection messages at Apple...
Mirai variant infects low-cost Android TV boxes for DDoS attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Image: Midjourney A new Mirai malware botnet variant has been spotted infecting inexpensive Android TV set-top boxes used by millions...
Toyota says filled disk storage halted Japan-based factories – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Image: Midjourney Toyota says a recent disruption of operations in Japan-based production plants was caused by its database servers running...
Atlas VPN zero-day vulnerability leaks users’ real IP address – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas An Atlas VPN zero-day vulnerability affecting the Linux client leaks a user’s real IP address simply by visiting a website....
Crypto casino Stake.com loses $41 million to hot wallet hackers – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Image: Midjourney Online cryptocurrency casino Stake.com announced that its ETH/BSC hot wallets had been compromised to perform unauthorized transactions, with...
Chaes malware now uses Google Chrome DevTools Protocol to steal data – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The Chaes malware has returned as a new, more advanced variant that includes a custom implementation of the Google DevTools...
ASUS routers vulnerable to critical remote code execution flaws – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Three critical-severity remote code execution vulnerabilities impact ASUS RT-AX55, RT-AX56U_V2, and RT-AC86U routers, potentially allowing threat actors to hijack devices...
Insurer fined $3M for exposing data of 650k clients for two years – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The Swedish Authority for Privacy Protection (IMY) has fined insurer Trygg-Hansa $3 million for exposing on its online portal sensitive data belonging...
German financial agency site disrupted by DDoS attack since Friday – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The German Federal Financial Supervisory Authority (BaFin) announced today that an ongoing distributed denial-of-service (DDoS) attack has been impacting its...
Hackers exploit MinIO storage system to breach corporate networks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Image: Midjourney Hackers are exploiting two recent MinIO vulnerabilities to breach object storage systems and access private information, execute arbitrary...
Okta: Hackers target IT help desks to gain Super Admin, disable MFA – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Identity and access management company Okta released a warning about social engineering attacks targeting IT service desk agents at U.S.-based customers in an attempt...
University of Sydney data breach impacts recent applicants – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The University of Sydney (USYD) announced that a breach at a third-party service provider exposed personal information of recently applied...
Chrome extensions can steal plaintext passwords from websites – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can...
Microsoft retires Visual Studio for Mac, support ends in a year – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Microsoft has announced it is retiring Visual Studio for Mac and that support for the latest version, 17.6, will continue for another...
Lazarus hackers deploy fake VMware PyPI packages in VMConnect attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas North Korean state-sponsored hackers have uploaded malicious packages to the PyPI (Python Package Index) repository, camouflaging one of them as...
Golf gear giant Callaway data breach exposes info of 1.1 million – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Topgolf Callaway (Callaway) suffered a data breach at the start of August, which exposed the sensitive personal and account data...
Forever 21 data breach: hackers accessed info of 500,000 – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Forever 21 clothing and accessories retailer is sending data breach notifications to more than half a million individuals who had...