Cyber

Commercial spyware vendor exploits used by Kremlin-backed hackers, Google says

Findings undercut pledges of NSO Group and Intellexa their wares won't be abused. Critics of spyware and exploit sellers have long warned that the advanced hacking sold by commercial surveillance...

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Vulnerability is easy to exploit and allows attackers to remotely execute commands. Malicious hackers are...

Microsoft to host security summit after CrowdStrike disaster

Redmond wants to improve the resilience of Windows to buggy software. Microsoft is stepping up...

Android malware steals payment card data using previously unseen technique

Attacker then emulates the card and makes withdrawals or payments from victim's account. Newly discovered...

Hackers exploit VMware vulnerability that gives them hypervisor admin

Create new group called "ESX Admins" and ESXi automatically gives it admin rights. Microsoft is...

Commercial spyware vendor exploits used by Kremlin-backed hackers, Google says

Findings undercut pledges of NSO Group and Intellexa their wares won't be abused. Critics of spyware and exploit sellers have long warned that the advanced...

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Vulnerability is easy to exploit and allows attackers to remotely execute commands. Malicious hackers are exploiting a critical vulnerability in a widely used security camera...

Microsoft to host security summit after CrowdStrike disaster

Redmond wants to improve the resilience of Windows to buggy software. Microsoft is stepping up its plans to make Windows more resilient to buggy software...

Android malware steals payment card data using previously unseen technique

Attacker then emulates the card and makes withdrawals or payments from victim's account. Newly discovered Android malware steals payment card data using an infected device’s...

Hackers exploit VMware vulnerability that gives them hypervisor admin

Create new group called "ESX Admins" and ESXi automatically gives it admin rights. Microsoft is urging users of VMware’s ESXi hypervisor to take immediate action...

North Korean hacker got hired by US security vendor, immediately loaded malware

KnowBe4, which provides security awareness training, was fooled by stolen ID. KnowBe4, a US-based security vendor, revealed that it unwittingly hired a North Korean hacker...

Report: Alphabet close to $23 billion deal for cybersecurity startup Wiz

Deal of this size would draw scrutiny from antitrust regulators around the world. Google’s parent company, Alphabet, is in talks to buy cybersecurity start-up Wiz...

Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it

The goal of the exploits was to open Explorer and trick targets into running malicious code. Threat actors carried out zero-day attacks that targeted Windows...

To guard against cyberattacks in space, researchers ask “what if?”

A hack on satellites could cripple much of our digital infrastructure. If space systems such as GPS were hacked and knocked offline, much of the world...

384,000 sites pull code from sketchy code library recently bought by Chinese firm

Many website admins, it seems, have yet to get memo to remove Polyfillio links. More than 384,000 websites are linking to a site that was...

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

Full system compromise possible by peppering servers with thousands of connection requests. Researchers have warned of a critical vulnerability affecting the OpenSSH networking utility that...

3 million iOS and macOS apps were exposed to potent supply-chain attacks

Apps that used code libraries hosted on CocoaPods were vulnerable for about 10 years. Vulnerabilities that went undetected for a decade left thousands of macOS...

Mac users served info-stealer malware through Google ads

Full-service Poseidon info stealer pushed by "advertiser identity verified by Google." Mac malware that steals passwords, cryptocurrency wallets, and other sensitive data has been spotted...

High-severity vulnerabilities affect a wide range of Asus router models

Many models receive patches; others will need to be replaced. Enlarge Hardware manufacturer Asus has released updates patching multiple critical vulnerabilities that allow hackers to remotely...
HomeCyber