Microsoft says Chinese hackers targeted groups via server software
A China-linked cyberespionage group has been remotely plundering email inboxes using freshly discovered flaws in Microsoft mail server software, the company and outside researchers said on Tuesday – an...
Malicious Code Bombs Target Amazon, Lyft, Slack, Zillow
Attackers have weaponized code dependency confusion to target internal apps at tech giants.
Researchers have spotted malicious packages targeting internal applications for Amazon, Lyft, Slack and Zillow (among others) inside...
Unpatched Bug in WiFi Mouse App Opens PCs to Attack
Wireless mouse-utility lacks proper authentication and opens Windows systems to attack.
The mobile application called WiFi Mouse, which allows users to control mouse movements on a PC or Mac with...
Cybersecurity is not too technical. Nor should be a career in the field
The talent shortage in the cybersecurity field is often self-inflicted. Numerous technical requirements scare capable people away when a large portion of the vacancies do not require people to...
Jailbreak Tool Works on iPhones Up to iOS 14.3
The UnC0ver team took advantage of an iOS flaw patched in January in its latest tool allowing developers and other enthusiasts to hack into their own devices.
Hackers behind previous...
Ryuk Ransomware: Now with Worming Self-Propagation
The Ryuk scourge has a new trick in its arsenal: Self-replication via SMB shares and port scanning.
A new version of the Ryuk ransomware is capable of worm-like self-propagation within...
Compromised Website Images Camouflage ObliqueRAT Malware
Emails spreading the ObliqueRAT malware now make use of steganography, disguising their payloads on compromised websites.
The ObliqueRAT malware is now cloaking its payloads as seemingly-innocent image files that...
Hackers are outpacing defences, new report finds
The battle between threat actors and those mounting cyber defenses designed to keep them out is a constant cat and mouse game. But new data from Crowdstrike, which releases...
Dependency confusion explained: Another risk when using open-source repositories
What is dependency confusionDependency confusion is a newly discovered logic flaw in the default way software development tools pull third-party packages from public and private repositories. Attackers can take...
Firewall Vendor Patches Critical Auth Bypass Flaw
Cybersecurity firm Genua fixes a critical flaw in its GenuGate High Resistance Firewall, allowing attackers to log in as root users.
Germany-based cybersecurity company Genua has fast-tracked a fix for...
