A malicious program intended to cause havoc with IT systems—malware—is becoming more and more sophisticated every year. The year 2021 is no exception, as recent …
YIKES! Hackers flood the web with 100,000 pages offering malicious PDFs
Cybercriminals are resorting to search engine poisoning techniques to lure business professionals into seemingly legitimate Google sites that install a Remote Access Trojan (RAT) capable …
New WhatsApp Bugs Could’ve Let Attackers Hack Your Phone Remotely
Facebook-owned WhatsApp recently addressed two security vulnerabilities in its messaging app for Android that could have been exploited to execute malicious code remotely on the …
New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks
Academics from Vrije University in Amsterdam and ETH Zurich have published a new research paper describing yet another variation of the Rowhammer attack. Dubbed SMASH[1] …
Simplify, then Add Lightness – Consolidating the Technology to Better Defend Ourselves
One of the biggest consequences of the rapidly evolving cybersecurity threat landscape is that defenses must constantly build bigger systems to defend themselves. This leads …
Update Your Chrome Browser to Patch 2 New In-the-Wild 0-Day Exploits
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabilities for …
NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers
In its April slate of patches, Microsoft rolled out fixes for a total of 114 security flaws[1], including an actively exploited zero-day and four remote …
New NAME:WRECK Vulnerabilities Impact Nearly 100 Million IoT Devices
Security researchers have uncovered nine vulnerabilities affecting four TCP/IP stacks impacting more than 100 million consumer and enterprise devices that could be exploited by an …
Hackers Using Website’s Contact Forms to Deliver IcedID Malware
Microsoft has warned organizations of a “unique” attack campaign that abuses contact forms published on websites to deliver malicious links to businesses via emails containing …
Detecting the “Next” SolarWinds-Style Cyber Attack
The SolarWinds attack[1], which succeeded by utilizing the sunburst malware[2], shocked the cyber-security industry. This attack achieved persistence and was able to evade internal systems …