Unveiling the Threat of Malicious Browser Extensions Dec 06, 2023The Hacker NewsBrowser Security / Privacy Compromising the browser is a high-return target for adversaries. Browser extensions, which are small software modules that are added to the browser and can enhance Read more…
Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution Dec 06, 2023NewsroomSoftware Security / Vulnerability Atlassian has released software fixes to address four critical flaws in its software that, if successfully exploited, could result in remote code execution. The Read more…
Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks Dec 06, 2023NewsroomVulnerability / Mobile Security Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under “limited, targeted exploitation” back in October 2023. The Read more…
Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a now-patched critical security flaw in its Outlook email service to gain unauthorized access to victims’ accounts within Exchange servers. The Read more…
15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack Dec 05, 2023NewsroomSoftware Security / Supply Chain New research has found that over 15,000 Go module repositories on GitHub are vulnerable to an attack called repojacking. “More than 9,000 repositories Read more…
Experts Warn of Sneaky Fake Lockdown Mode Attack Dec 05, 2023NewsroomMobile Security / Spyware A new “post-exploitation tampering technique” can be abused by malicious actors to visually deceive a target into believing that their Apple iPhone is running in Lockdown Read more…
Russia’s AI-Powered Disinformation Operation Targeting Ukraine, U.S., and Germany Dec 05, 2023NewsroomBrandjacking / Artificial Intelligence The Russia-linked influence operation called Doppelganger has targeted Ukrainian, U.S., and German audiences through a combination of inauthentic news sites and social media accounts. These Read more…
Preventing Microsoft Copilot Data Exposure Microsoft Copilot has been called one of the most powerful productivity tools on the planet. Copilot is an AI assistant that lives inside each of your Microsoft 365 apps — Word, Excel, PowerPoint, Teams, Outlook, Read more…
New Threat Actor ‘AeroBlade’ Emerges in Espionage Attack on U.S. Aerospace Dec 05, 2023NewsroomCyber Espionage / Threat Analysis A previously undocumented threat actor has been linked to a cyber attack targeting an aerospace organization in the U.S. as part of Read more…
New P2PInfect Botnet MIPS Variant Targeting Routers and IoT Devices Dec 04, 2023NewsroomMalware / Botnet Cybersecurity researchers have discovered a new variant of an emerging botnet called P2PInfect that’s capable of targeting routers and IoT devices. The latest version, per Read more…