Microsoft has alerted customers that Windows 11 21H2 systems will undergo automatic updates before the end of their servicing period [...]
Category: News
Even ransomware gangs can make errors. The Key Group, a ransomware gang, made a cryptographic mistake, allowing security researchers to [...]
Chinese hacker group GREF has planted BadBazaar spyware in modified Signal and Telegram apps on Google Play and Samsung Galaxy [...]
A new Android banking malware, MMRat, employs an uncommon method of communication—protobuf data serialization—to efficiently steal data from compromised devices. [...]
Japan's JPCERT has unveiled a 'MalDoc in PDF' attack (July 2023) that hides harmful Word files within PDFs to avoid [...]
On August 8, 2023, Secureworks® Counter Threat Unit™ (CTU) researchers discovered the Smoke Loader botnet deploying a custom Wi-Fi scanning [...]
Microsoft has pinpointed a new hacking group, Flax Typhoon, focusing on government, education, critical manufacturing, and IT sectors for likely [...]
The CVE-2023-38831 WinRAR zero-day flaw was exploited to install malware through harmless archive files, compromising online cryptocurrency trading accounts. This [...]
In a fresh HiatusRAT malware drive, cyber attackers have focused on a U.S. Department of Defense server in a reconnaissance [...]
An Amazon ad on Google search leads to a Microsoft Defender scam that traps users in their browser. BleepingComputer reported [...]
The China-linked APT group named 'Bronze Starlight' targeted the Southeast Asian gambling industry with malware using a legitimate certificate from [...]
A critical WinRAR vulnerability (CVE-2023-40477) has been patched. This flaw allows attackers to execute commands on a system by simply [...]
AquaSec, a security research team, recently released a report outlining significant security vulnerabilities within Microsoft's PowerShell Gallery (PSGallery), a repository [...]
The creators of Raccoon Stealer malware, known for stealing information, have resurfaced after a 6-month break on hacker forums. They're [...]
The custom invite service, Discord.io, temporarily closed due to a breach exposing data of 760,000 members. While not an official [...]
The Rhysida ransomware group gained attention through healthcare attacks, prompting government agencies and cybersecurity firms to take notice. US HHS [...]
'BitForge' zero-day vulnerabilities in widespread cryptographic protocols (GG-18, GG-20, Lindell 17) impacted major crypto wallets like Coinbase, ZenGo, Binance. Attackers [...]
Researchers from the Technical University of Berlin have developed a method to jailbreak Tesla's infotainment systems in recent car models. [...]
In June 2023, Microsoft introduced the Azure Active Directory Cross-Tenant Synchronization (CTS) feature, allowing administrators to synchronize users and groups [...]
Soon, the list of LOLBAS files, which comprises legitimate binaries and scripts in Windows that can be exploited for malicious [...]
A new strain of malware, believed to be orchestrated by Chinese state-sponsored hackers, has emerged, targeting industrial organizations. This sophisticated [...]
CISA has reported the use of new malware named Submarine to backdoor Barracuda ESG appliances on federal agencies' networks. The [...]
Microsoft has addressed a known problem that was causing video recording and playback failures in certain apps on both Windows [...]
More than 900,000 MikroTik RouterOS routers face a critical risk from a 'Super Admin' privilege elevation flaw (CVE-2023-30799). This vulnerability [...]
North Korea's Lazarus hacking group is hacking into Windows Internet Information Service (IIS) web servers to distribute malware. IIS is [...]
Storm-0558 Chinese hackers gained access to the Microsoft consumer signing key, which had broader implications than initially acknowledged. Redmond confirmed [...]
Microsoft is expanding free access to additional cloud logging data worldwide to aid in detecting breached networks and accounts. This [...]
FIN8, a financially motivated cybercrime gang, has been using BlackCat ransomware on networks that were infiltrated with a new version [...]
Google Play is taking action against malware by requiring new developer accounts to provide a valid D-U-N-S number before submitting [...]
PyLoose, a fileless malware, is exploiting cloud workloads for Monero mining by utilizing a simple Python script containing an encoded [...]
Microsoft has taken action to block code signing certificates that have been primarily used by Chinese hackers and developers to [...]
Apple has released security updates for its operating systems and Safari web browser to fix a zero-day vulnerability that was [...]
Researchers in the field of cybersecurity have analyzed a newly discovered ransomware called 'Big Head,' which appears to be propagated [...]
CISA has directed federal agencies to address a high-severity privilege escalation flaw in the Arm Mali GPU kernel driver, listed [...]
Researchers uncovered two file management apps on Google Play, originating from the same publisher and boasting a combined installation count [...]
TeamsPhisher, a tool created by a member of the U.S. Navy's red team, exploits a security vulnerability in Microsoft Teams [...]
Google has spent over a year developing the new Extensions toolbar menu, which now enables users to disable extensions on [...]
Avast, a cybersecurity company, has introduced a complimentary decryption tool to combat the Akira ransomware, offering victims a chance to [...]
Security analysts have uncovered 'EarlyRAT,' an undocumented remote access trojan (RAT) utilized by Andariel, a sub-group of the Lazarus North [...]
Microsoft has resolved a known problem in Windows 11 and Windows Server systems where File Explorer freezes after checking a [...]