Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices. Attributing the malware to a …
Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware
A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a “fairly sophisticated” framework called NetDooka, granting attackers complete control over the infected …
Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers
The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the …
Google Releases Android Update to Patch Actively Exploited Vulnerability
Google has released monthly security patches for Android with fixes for 37 flaws across different components, one of which is a fix for an actively …
Google to Add Passwordless Authentication Support to Android and Chrome
Google today announced plans[1] to implement support for passwordless logins in Android and the Chrome web browser to allow users to seamlessly and securely sign …
NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks
The National Institute of Standards and Technology (NIST) on Thursday released an updated cybersecurity guidance for managing risks in the supply chain, as it increasingly …
Researchers Disclose Years-Old Vulnerabilities in Avast and AVG Antivirus
Two high-severity security vulnerabilities, which went undetected for several years, have been discovered in a legitimate driver[1] that’s part of Avast and AVG antivirus solutions. …
The Importance of Defining Secure Code
The developers who create the software, applications and programs that drive digital business have become the lifeblood of many organizations. Most modern businesses would not …
Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus
Two high-severity security vulnerabilities, which went undetected for several years, have been discovered in a legitimate driver[1] that’s part of Avast and AVG antivirus solutions. …
Heroku Forces User Password Resets Following GitHub OAuth Token Theft
Salesforce-owned subsidiary Heroku on Thursday acknowledged that the theft of GitHub integration OAuth tokens further involved unauthorized access to an internal customer database. The company, …
