Malware & Threats
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Malware & Threats
A stolen copy of Shellter Elite shows how easily legitimate security tools can be repurposed by threat actors when vetting and oversight fail.
Malware & Threats
SentinelOne says the fake Zoom update scam delivers ‘NimDoor’, a rare Nim-compiled backdoor.
Malware & Threats
China-linked Silver Fox hacking group is targeting Chinese users with fake installers carrying a RAT and a rootkit.
Malware & Threats
The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets.
Malware & Threats
Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms.
Malware & Threats
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.
Malware & Threats
Akamai warns that a Chinese threat actor is exploiting years-old remote code execution vulnerabilities in ThinkPHP in new attacks.
Malware & Threats
Google and Microsoft warn of elevated risks of cyber threats facing the 2024 Paris Olympics, especially from Russian threat actors.
Malware & Threats
Multiple Chinese state-sponsored groups have targeted a Southeast Asian government in a years-long cyberespionage campaign.
Malware & Threats
Cybersecurity researchers are demonstrating how malware could steal data collected by the new Windows Recall feature.
Malware & Threats
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.
Malware & Threats
Law enforcement reveals the identities of eight cybercriminals linked to recently disrupted malware loaders.
Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Malware & Threats
Over 600,000 SOHO routers belonging to a single ISP and infected with the Chalubo trojan were rendered inoperable.
Malware & Threats
Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.
Malware & Threats
The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.
Malware & Threats
Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.
Malware & Threats
The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
ICS/OT
Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.
Malware & Threats
The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages.
Malware & Threats
The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
AI-made decisions are in many ways shaping and governing human lives. Companies have a moral, social, and fiduciary duty to responsibly lead its take-up.
(Stu Sjouwerman)
Ransomware is a major threat to the enterprise. Tools and training help, but survival depends on one thing: your organization’s muscle memory to respond fast and recover stronger.
(Trevin Edgeworth)
Strong security doesn’t just rely on tools—it starts with trust, clarity, and sincerity from the top down.
(Joshua Goldfarb)
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
(Torsten George)
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)