iPhone Users Urged to Update to Patch 2 Zero-Days
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
Apple is urging...
BlackByte Ransomware Gang Returns With Twitter Presence, Tiered Pricing
The BlackByte ransomware group, which has connections to Conti, has resurfaced after a hiatus with a new social media presence on Twitter and new extortion methods borrowed from the better-known...
State-Sponsored APTs Dangle Job Opps to Lure In Spy Victims
Fake job offers have become a top phishing tactic for state-sponsored threat actors to lure in unsuspecting targets in the wake of the COVID-19 pandemic, as many reconsider their...
Google Patches Chrome’s Fifth Zero-Day of the Year
An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
Google has patched the fifth...
Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel Sectors
Another threat actor targeting hospitality, hotel, and travel organizations has re-emerged during the busy summer travel season: a smaller, financially motivated player named TA558.
According to new research from Proofpoint,...
Which Security Bugs Will Be Exploited? Researchers Create an ML Model to Find Out
Using machine learning trained on data from more than two dozen sources, a team of university researchers has created a model for predicting which vulnerabilities will likely result in...
5 Russia-Linked Groups Target Ukraine in Cyberwar
Over the past eight months, at least five Russian state-sponsored or cybercriminal groups have targeted Ukrainian government agencies and private companies in dozens of operations that aimed to disrupt...
Mac Attack: North Korea’s Lazarus APT Targets Apple’s M1 Chip
North Korean advanced persistent threat (APT) Lazarus is casting a wider net with its ongoing Operation In(ter)ception campaign, targeting Macs with Apple's M1 chip.
The state-sponsored group is continuing its...
China’s APT41 Embraces Baffling Approach for Dropping Cobalt Strike Payload
An analysis of China-backed advanced persistent threat (APT) actor APT41's activities has shown the group to be using a unique — and somewhat inexplicable — method for deploying its main Cobalt...
Celer Network shuts down bridge over potential DNS hijacking
Interoperability protocol Celer Network has asked its users to revoke the approval for several contracts after shutting down its cBridge over a suspected Domain Name System (DNS) hijacking. According to...
