Malware & Threats
The DreamBus botnet has resurfaced and it has been exploiting a recently patched Apache RocketMQ vulnerability to deliver a Monero miner.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages.
Malware & Threats
The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.
Fraud & Identity Theft
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
Malware & Threats
The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.
Malware & Threats
Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention.
Malware & Threats
Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.
Fraud & Identity Theft
U.S. law enforcement announce the disruption of the notorious Qakbot cybercrime operation and the release of an auto-disinfection tool to 700,000 infected machines.
Malware & Threats
VWware patches critical flaws that allow hackers to bypass SSH authentication and gain access to the Aria Operations for Networks command line interface.
Malware & Threats
The newly identified MMRat Android trojan has been targeting users in Southeast Asia to remotely control devices and perform bank fraud.
Application Security
The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum.
Malware & Threats
QakBot, SocGholish, and Raspberry Robin are the three most popular malware loaders, accounting for 80% of the observed incidents.
Malware & Threats
Microsoft warns that Chinese spies are hacking into Taiwanese organizations with minimal use of malware and by abusing legitimate software.
Malware & Threats
Mysterious Whiffy Recon malware scans for nearby Wi-Fi access points to obtain the location of the infected device.
Malware & Threats
The FBI says that the patches Barracuda released in May for an exploited ESG zero-day vulnerability (CVE-2023-2868) were not effective.
Cybercrime
A financially motivated cybercrime group has exploited a WinRAR zero-day to deliver malware to traders and steal their money.
Malware & Threats
More than 3,000 Openfire servers are not patched against a recent vulnerability and are exposed to attacks employing a new exploit.
Malware & Threats
A new APT group called Carderbee has been observed deploying the PlugX backdoor via a supply chain attack targeting organizations in Hong Kong.
Artificial Intelligence
Slack reveals it has been training AI/ML models on customer data, including messages, files and usage information. It's opt-in by default.
Data Breaches
Cyberwarfare
Vulnerabilities
Artificial Intelligence
Jan Leike, who ran OpenAI’s “Super Alignment” team, believes there should be more focus on preparing for the next generation of AI models, including...
Vulnerabilities
Application Security
Tracking & Law Enforcement
