Researchers Warn of Ongoing Mass Exploitation of Zimbra RCE Vulnerability
By: Ravie Lakshmanan
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two flaws to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
The two high-severity issues...
Microsoft: We Don’t Want to Zero-Day Our Customers
BLACK HAT USA — Las Vegas — A top Microsoft security executive today defended the company's vulnerability disclosure policies as providing enough information for security teams to make informed...
Novel Ransomware Comes to the Sophisticated SOVA Android Banking Trojan
The Android banking Trojan SOVA is back and sporting updated capabilities — with an additional version in development that contains a ransomware module.
Researchers at Cleafy, which documented
the resurgence of...
Cross-chains in the crosshairs: Hacks call for better defense mechanisms
2022 has been a lucrative year for hackers preying on the nascent Web3 and decentralized finance (DeFi) spaces, with more than $2 billion worth of cryptocurrency fleeced in several...
Binance recovers the majority of funds stolen from Curve Finance
Crypto exchange Binance has recovered a big part of the funds from the recent hack that targeted the decentralized finance (DeFi) protocol Curve Finance. In a tweet, Binance CEO Changpeng...
Krebs: Taiwan, Geopolitical Headwinds Loom Large
BLACK HAT – Las Vegas – A potential invasion of Taiwan should be top of mind for any entity, as geopolitical factors will continue to affect cybersecurity risk profiles.
That's...
Messaging Apps Tapped as Platform for Cybercriminal Activity
Built-in Telegram and Discord services are fertile ground for storing stolen data, hosting malware and using bots for nefarious purposes.
Cybercriminals are tapping the built-in services of popular messaging apps...
Cisco Confirms It’s Been Hacked by Yanluowang Ransomware Gang
By: Ravie Lakshmanan
Networking equipment major Cisco on Wednesday confirmed it was the victim of a cyberattack on May 24, 2022 after the attackers got hold of an employee's personal...
Conti Cybercrime Cartel Using ‘BazarCall’ Phishing Attacks as Initial Attack Vector
By: Ravie Lakshmanan
Three different offshoots of the notorious Conti cybercrime cartel have resorted to the technique of call-back phishing as an initial access vector to breach targeted networks.
"Three autonomous...
New HTTP Request Smuggling Attacks Target Web Browsers
BLACK HAT USA – LAS VEGAS – A security researcher who previously demonstrated how attackers can abuse weaknesses in the way websites handle HTTP requests warned that the same issues can...
