A security researcher disclosed details of a clickjacking attack demonstrated against PayPal that could be exploited to steal victims’ account balances in a single click. …
Chinese “Twisted Panda” Hackers Caught Spying on Russian Defense Institutes
At least two research institutes located in Russia and a third likely target in Belarus have been at the receiving end of an espionage attack …
Researchers Find Backdoor in School Management Plugin for WordPress
Multiple versions of a WordPress plugin by the name of “School Management Pro” harbored a backdoor that could grant an adversary complete control over vulnerable …
Cisco Issues Patches for New IOS XR Zero-Day Vulnerability Exploited in the Wild
Cisco on Friday rolled out fixes for a medium-severity vulnerability affecting IOS XR Software that it said has been exploited in real-world attacks. Tracked as …
Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild
Cisco on Friday rolled out fixes for a medium-severity vulnerability affecting IOS XR Software that it said has been exploited in real-world attacks. Tracked as …
Cytrox’s Predator Spyware Targeted Android Users with Zero-Day Exploits
Google’s Threat Analysis Group (TAG) on Thursday pointed fingers at a North Macedonian spyware developer named Cytrox for developing exploits against five zero-day (aka 0-day) …
Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices
A Linux botnet malware known as XorDdos has witnessed a 254% surge in activity over the last six months, according to latest research from Microsoft. …
Researchers Uncover Rust Supply-Chain Attack Targeting Cloud CI Pipelines
A case of software supply chain attack has been observed in the Rust programming language’s crate registry[1] that leveraged typosquatting techniques to publish a rogue …
Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor
The North Korea-backed Lazarus Group has been observed leveraging the Log4Shell vulnerability[1] in VMware Horizon servers to deploy the NukeSped (aka Manuscrypt) implant against targets …
Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware
Fraudulent domains masquerading as Microsoft’s Windows 11 download portal are attempting to trick users into deploying trojanized installation files to infect systems with the Vidar …
