An unknown Chinese-speaking threat actor has been attributed to a new kind of sophisticated UEFI firmware rootkit called CosmicStrand. “The rootkit is located in the …
Magecart Hacks Food Ordering Systems to Steal Payment Data from Over 300 Restaurants
Three restaurant ordering platforms MenuDrive, Harbortouch, and InTouchPOS were the target of two Magecart skimming campaigns that resulted in the compromise of at least 311 …
Racoon Stealer is Back — How to Protect Your Organization
The Racoon Stealer malware as a service platform gained notoriety several years ago for its ability to extract data that is stored within a Web …
Roaming Mantis Financial Hackers Targeting Android and iPhone Users in France
The mobile threat campaign tracked as Roaming Mantis has been linked to a new wave of compromises directed against French mobile phone users, months after …
SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products
Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection (SQLi) vulnerability affecting its Analytics On-Prem and Global Management System …
Microsoft Resumes Blocking Office VBA Macros by Default After ‘Temporary Pause’
Microsoft has officially resumed blocking Visual Basic for Applications (VBA) macros by default across Office apps, weeks after temporarily announcing plans to roll back the …
An Easier Way to Keep Old Python Code Healthy and Secure
Python has its pros and cons, but it’s nonetheless used extensively. For example, Python is frequently used in data crunching tasks even when there are …
Google Bringing the Android App Permissions Section Back to the Play Store
Google on Thursday said it’s backtracking on a recent change[1] that removed the app permissions list from the Google Play Store for Android across both …
Ukrainian Radio Stations Hacked to Broadcast Fake News About Zelenskyy’s Health
Ukrainian radio operator TAVR Media on Thursday became the latest victim of a cyberattack, resulting in the broadcast of a fake message that President Volodymyr …
Candiru Spyware Caught Exploiting Google Chrome Zero-Day to Target Journalists
The actively exploited but now-fixed Google Chrome zero-day flaw that came to light earlier this month was weaponized by an Israeli spyware company and used …
