Malware & Threats
A new macOS-targeting hVNC malware family is being advertised on a prominent cybercrime forum.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
New versions of Pakistan-linked APT Transparent Tribe’s CapraRAT Android trojan mimic the appearance of YouTube.
Malware & Threats
CISA says Owl Labs video conferencing device vulnerabilities that require the attacker to be in close range exploited in attacks
Malware & Threats
The MetaStealer macOS information stealer has been targeting businesses to exfiltrate keychain and other valuable information.
Malware & Threats
After Apple and Google, Mozilla has also patched an image processing-related zero-day vulnerability exploited by spyware.
Malware & Threats
Microsoft’s struggles with zero-day exploits rolled into a new month with a fresh Patch Tuesday warning about malware attacks in the wild.
Malware & Threats
Cisco is warning of a zero-day vulnerability in Cisco ASA and FTD that can be exploited remotely, without authentication, in brute force attacks.
Malware & Threats
The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.
Malware & Threats
Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.
Malware & Threats
CISA has shared analysis reports on three malware families obtained from an organization hacked via a recent Barracuda ESG vulnerability.
Malware & Threats
The first attempts to exploit CVE-2023-24489, a recent critical Citrix ShareFile remote code execution vulnerability, have been observed.
Email Security
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 17,...
Malware & Threats
Multiple DDoS botnets have been observed targeting CVE-2023-28771, a Zyxel firewall vulnerability patched in April.
Malware & Threats
The Rust-based peer-to-peer worm ‘P2PInfect’ is targeting a Lua sandbox escape vulnerability in internet-accessible Redis servers.
Malware & Threats
Attackers are exploiting two path traversal vulnerabilities in the Stagil navigation for Jira – Menus & Themes plugin.
Government
The two foreign companies are being sanctioned for “for trafficking in cyber exploits used to gain access to information systems.”
Malware & Threats
Attackers have started exploiting CVE-2023-28121, a recent critical vulnerability in the WooCommerce Payments WordPress plugin.
Fraud & Identity Theft
The British company secures $100 million in funding and announced the hiring of a new chief executive to pursue global expansion plans.
Mobile & Wireless
Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.
Funding/M&A
Cybersecurity Funding
Artificial Intelligence
Vulnerabilities
