Retail giant Amazon patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on …
Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware
A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads …
China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year
The Chinese advanced persistent threat (APT) actor tracked as Winnti (aka APT41) has targeted at least 13 organizations geographically spanning across the U.S, Taiwan, India, …
Penetration Testing or Vulnerability Scanning? What’s the Difference?
Pentesting and vulnerability scanning are often confused for the same service. The problem is, business owners often use one when they really need the other. …
Hackers Using Bumblebee Loader to Compromise Active Directory Services
The malware loader known as Bumblebee is being increasingly co-opted by threat actors associated with BazarLoader, TrickBot, and IcedID in their campaigns to breach target …
Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities
Apple on Wednesday released security updates for iOS, iPadOS[1], and macOS[2] platforms to remediate two zero-day vulnerabilities previously exploited by threat actors to compromise its …
The Hacker News – b8fba49605eafff37bd35d107d2f41c2 – 2022-08-18 11:14:26
HTTP/2 200 date: Thu, 18 Aug 2022 11:14:28 GMT content-type: text/plain;charset=UTF-8 content-length: 95 expect-ct: max-age=604800, report-uri=”https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct” report-to: {“endpoints”:[{“url”:”https:\/\/a.nel.cloudflare.com\/report\/v3?s=YywMx2nFjSsEwDxeVlZjYPDuEy847zA5sQCGnGwcV1rD7lD%2Fb42yRVIVjXWVTFfJo2DW14IJWUyEYm9lezTD2GyIyQR1kbNSEbSnee44%2BtUUKft1ENFqka4C2QQBmS5zZN0i”}],”group”:”cf-nel”,”max_age”:604800} nel: {“success_fraction”:0,”report_to”:”cf-nel”,”max_age”:604800} strict-transport-security: max-age=15552000; includeSubDomains; preload x-content-type-options: …
Cybercriminals Developing BugDrop Malware to Bypass Android Security Features
In a sign that malicious actors continue to find ways to work around Google Play Store security protections, researchers have spotted a previously undocumented Android …
New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild
Google on Tuesday rolled out patches for Chrome browser for desktops to contain an actively exploited high-severity zero-day flaw in the wild. Tracked as CVE-2022-2856, …
Researchers Link Multi-Year Mass Credential Theft Campaign to Chinese Hackers
A Chinese state-sponsored threat activity group named RedAlpha has been attributed to a multi-year mass credential theft campaign aimed at global humanitarian, think tank, and …
