Teenage members of Lapsus$ ransomware gang convicted

Categories: Business

Tags: business

Tags: hack

Tags: hacked

Tags: compromise

Tags: lapsus$

Tags: convicted

Tags: crime

Tags: ransomware

Tags: leak

Tags: breach

A wave of video game developer compromises has come to a court-based conclusion.

(Read more…)

The post Teenage members of Lapsus$ ransomware gang convicted appeared first on Malwarebytes Labs.

Read more

Update now! Google Chrome’s first weekly update has arrived

Categories: Exploits and vulnerabilities

Tags: stable channel

Tags: weekly updates

Tags: CVE-2023-4427

Tags: CVE-2023-4428

Tags: CVE-2023-4429

Tags: CVE-2023-4430

Tags: CVE-2023-4431

Tags: use after free

Tags: out of bounds

Tags: heap corruption

The first of Chrome’s now weekly security updates fixes five vulnerabilities.

(Read more…)

The post Update now! Google Chrome’s first weekly update has arrived appeared first on Malwarebytes Labs.

Read more

Smart lightbulb and app vulnerability puts your Wi-Fi password at risk

Categories: Business

Tags: business

Tags: home

Tags: personal

Tags: router

Tags: wi-fi

Tags: wireless

Tags: network

Tags: home

Tags: bulb

Tags: smart bulb

Tags: IoT

Tags: app

Tags: TP-Link

We take a look at reports that a smart lightbulb and app vulnerability could potentially put your Wi-Fi password at risk.

(Read more…)

The post Smart lightbulb and app vulnerability puts your Wi-Fi password at risk appeared first on Malwarebytes Labs.

Read more

[updated] Ivanti Sentry critical vulnerability—don’t play dice, patch

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ivanti

Tags: Sentry

Tags: MobileIron

Tags: CVE-2023-38035

Tags: MICS

Tags: port 8443

There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch?

(Read more…)

The post [updated] Ivanti Sentry critical vulnerability—don’t play dice, patch appeared first on Malwarebytes Labs.

Read more

Ivanti Sentry critical vulnerability—don’t play dice, patch

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ivanti

Tags: Sentry

Tags: MobileIron

Tags: CVE-2023-38035

Tags: MICS

Tags: port 8443

There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch?

(Read more…)

The post Ivanti Sentry critical vulnerability—don’t play dice, patch appeared first on Malwarebytes Labs.

Read more

DarkGate reloaded via malvertising and SEO poisoning campaigns

Categories: Threat Intelligence

Tags: darkgate

Tags: autoit

Tags: malvertising

Tags: seo poisoning

The new version of the DarkGate malware is currently actively being distributed via malspam, malicious ads and SEO poisoning.

(Read more…)

The post DarkGate reloaded via malvertising and SEO poisoning campaigns appeared first on Malwarebytes Labs.

Read more

Adobe ColdFusion vulnerability exploited in the wild

Categories: Exploits and vulnerabilities

Categories: News

Tags: Adobe

Tags: ColdFusion

Tags: CVE-2023-26359

Tags: CVE-2023-26360

Tags: critical

Tags: known exploited

Tags: deserialization

A second Adobe ColdFusion vulnerability that was patched in April has been added to CISA’s known exploited vulnerabilities catalog.

(Read more…)

The post Adobe ColdFusion vulnerability exploited in the wild appeared first on Malwarebytes Labs.

Read more