SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation Sep 06, 2024Ravie LakshmananNetwork Security / Threat Detection SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential Read more…
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm Sep 05, 2024Ravie LakshmananCyber Attack / Malware The Chinese-speaking threat actor known as Earth Lusca has been observed using a new backdoor dubbed KTLVdoor as part of a cyber Read more…
New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating Read more…
North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit Aug 31, 2024Ravie LakshmananRootkit / Threat Intelligence A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in Read more…
Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32 Aug 29, 2024Ravie LakshmananCyber Espionage / Malware A non-profit supporting Vietnamese human rights has been the target of a multi-year campaign designed to deliver a variety of malware on compromised Read more…
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports Aug 28, 2024Ravie LakshmananSoftware Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw affecting the Apache OFBiz open-source enterprise resource planning Read more…
New Android Malware NGate Steals NFC Data to Clone Contactless Payment Cards Aug 26, 2024Ravie LakshmananFinancial Fraud / Mobile Security Cybersecurity researchers have uncovered new Android malware that can relay victims’ contactless payment data from physical credit and debit cards Read more…
New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads Aug 23, 2024Ravie LakshmananMalware / Threat Intelligence Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of Read more…
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild Aug 22, 2024Ravie LakshmananBrowser Security / Vulnerability Google has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active Read more…
Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information Aug 20, 2024Ravie LakshmananEnterprise Security / Data Breach Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to Read more…