Phemedrone info stealer campaign exploits Windows smartScreen bypass

2 years ago

Threat actors exploit a recent Windows SmartScreen bypass flaw CVE-2023-36025 to deliver the Phemedrone info stealer. Trend Micro researchers uncovered…

Balada Injector continues to infect thousands of WordPress sites

2 years ago

Balada Injector malware infected more than 7100 WordPress sites using a vulnerable version of the Popup Builder plugin. In September,…

Attackers target Apache Hadoop and Flink to deliver cryptominers

2 years ago

Researchers devised a new attack that exploits misconfigurations in Apache Hadoop and Flink to deploy cryptocurrency miners. Cybersecurity researchers from…

Apple fixed a bug in Magic Keyboard that allows to monitor Bluetooth traffic

2 years ago

Apple addressed a recently disclosed Bluetooth keyboard injection vulnerability with the release of Magic Keyboard firmware. Apple released Magic Keyboard…

Attacks against Denmark ‘s energy sector were not carried out by Russia-linked APT

2 years ago

Forescout experts questioned the attribution of cyber attacks that targeted the energy sector in Denmark in 2023 to the Russia-linked…

Mastermind behind 1.8 million cryptojacking scheme arrested in Ukraine

2 years ago

The National Police of Ukraine, with the support of Europol, arrested the alleged mastermind behind a sophisticated cryptojacking scheme. The…

Security Affairs newsletter Round 454 by Pierluigi Paganini – INTERNATIONAL EDITION

2 years ago

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free…

Akira ransomware targets Finnish organizations

2 years ago

The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape backup devices of organizations in…

GitLab fixed a critical zero-click account hijacking flaw

2 years ago

GitLab addressed two critical flaws impacting both the Community and Enterprise Edition, including a critical zero-click account hijacking vulnerability GitLab…

Juniper Networks fixed a critical RCE bug in its firewalls and switches

2 years ago

Juniper Networks fixed a critical pre-auth remote code execution (RCE) flaw, tracked as CVE-2024-21591, in its SRX Series firewalls and…

This website uses cookies.