Microsoft: macOS ‘Powerdir’ Flaw Could Let Attackers Gain Access to User Data
Microsoft today disclosed a vulnerability in Apple's macOS that could enable an attacker to gain unauthorized access to protected user data through bypassing the Transparency, Consent, and Control (TCC)...
No Significant Intrusions Related to Log4j Flaw Yet, CISA Says
In the one month since news broke of a critical remote code execution vulnerability in the Log4j logging framework, there have been no major intrusions tied to the flaw...
EoL Systems Stonewalling Log4j Fixes for Fed Agencies
End of life, end of support, pandemic-induced shipping delays and remote work, scanning failures: It’s a recipe for a patching nightmare, federal cybersecurity CTO Matt Keller says.
Last month,...
Cyber-Spike: Orgs Suffer 925 Attacks per Week, an All-Time High
Cyberattacks increased 50 percent YoY in 2021 and peaked in December due to a frenzy of Log4j exploits, researchers found.
2021 dragged itself to a close under a Log4Shell-induced...
FBI Warns FIN7 Campaign Delivers Ransomware via BadUSB
The FBI has warned of a FIN7 cybercrime campaign in which attackers mail USB thumb drives to US organizations with the goal of delivering ransomware into their environments.In an...
URL Parsing Bugs Allow DoS, RCE, Spoofing & More
Dangerous security bugs stemming from widespread inconsistencies among 16 popular third-party URL-parsing libraries could affect a wide swath of web applications.
Eight different security vulnerabilities arising from inconsistencies among 16...
Most of us have no idea our accounts are compromised
One of the more interesting features in the Google Chrome browser is to highlight any passwords stored in the browser that have been victims of (known) data breaches. The...
SIM swapping attacks cause another data breach at T-Mobile
T-Mobile suffered from a data breach in a series of SIM swapping attacks, potentially leaving sensitive information of a small number of customers exposed. The incident comes just a...
The emerging Abcbot botnet linked to actors behind Xanthe campaign
Xanthe cryptojacking campaign likely gave way to the Abcbot botnet, signaling a transition towards more hostile activities.Researchers at Cado security claim that the novel Abcbot botnet and Xanthe-based cryptojacking...
