A doubled “Dragon Breath” adds new air to DLL sideloading attacks
Credit to Author: Gabor Szappanos| Date: Wed, 03 May 2023 10:00:12 +0000
Exploits of the venerable vulnerability gain in complexity
Read moreSophos
Update 1: Increased exploitation of PaperCut drawing blood around the Internet
Credit to Author: Angela Gunn| Date: Thu, 27 Apr 2023 18:43:38 +0000
A recent remote code execution (RCE) vulnerability is increasingly in use to deliver Cobalt Strike and other remote management software, along with multiple ransomware threats – what you need to know about CVE-2023-27350
Read moreApple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused
Credit to Author: Paul Ducklin| Date: Mon, 01 May 2023 20:46:09 +0000
Just when we’d got used to three-numbered versions, such as “13.3.1”, here comes an update suffix, bringing you “13.3.1 (a)”…
Read moreMac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram
Credit to Author: Paul Ducklin| Date: Sun, 30 Apr 2023 01:23:38 +0000
These malware peddlers are specifically going after Mac users. The hint’s in the name: “Atomic macOS Stealer”, or AMOS for short.
Read moreGoogle wins court order to force ISPs to filter botnet traffic
Credit to Author: Naked Security writer| Date: Fri, 28 Apr 2023 16:59:16 +0000
CryptBot criminals are alleged to have plundered browser passwords, illicitly-snapped screenshots, cryptocurrency account data, and more.
Read moreIncreased exploitation of PaperCut drawing blood around the Internet
Credit to Author: Angela Gunn| Date: Thu, 27 Apr 2023 18:43:38 +0000
A recent remote code execution (RCE) vulnerability is increasingly in use to deliver Cobalt Strike and other remote management software, along with multiple ransomware threats – what you need to know about CVE-2023-27350
Read moreS3 Ep132: Proof-of-concept lets anyone hack at will
Credit to Author: Paul Ducklin| Date: Thu, 27 Apr 2023 16:55:18 +0000
When Doug says, “Happy Remote Code Execution Day, Duck”… it’s irony. For the avoidance of all doubt 🙂
Read moreGoogle leaking 2FA secrets – researchers advise against new “account sync” feature for now
Credit to Author: Paul Ducklin| Date: Wed, 26 Apr 2023 17:59:07 +0000
You waited 13 years for this feature in Google Authenticator. Now researchers are advising you to wait a while longer, just in case…
Read morePaperCut security vulnerabilities under active attack – vendor urges customers to patch
Credit to Author: Paul Ducklin| Date: Tue, 25 Apr 2023 17:53:39 +0000
If you have the product, but you haven’t patched – well, the crooks have now landed, so please don’t delay. Do it today…
Read moreEverything Everywhere All At Once: The 2023 Active Adversary Report for Business Leaders
Credit to Author: Angela Gunn| Date: Tue, 25 Apr 2023 10:00:03 +0000
A deep dive into over 150 incident-response cases reveals both attackers and defenders picking up the pace
Read more