Category: Uncategorized
-
Google Awards Over $60,000 for V8 Vulnerabilities Patched With Chrome 115 Update Ionut Arghire
Google has paid out over $60,000 for three high-severity type confusion vulnerabilities in Chrome’s V8 engine. The post Google Awards Over $60,000 for V8 Vulnerabilities Patched With Chrome 115 Update appeared first on SecurityWeek. Read More
-
“Mysterious Team Bangladesh” Targeting India with DDoS Attacks and Data Breaches [email protected] (The Hacker News)
A hacktivist group known as Mysterious Team Bangladesh has been linked to over 750 distributed denial-of-service (DDoS) attacks and 78 website defacements since June 2022. “The group most frequently attacks logistics, government, and financial sector organizations in India and Israel,” Singapore-headquartered cybersecurity firm Group-IB said in a report shared with The Hacker News. “The group isRead More
-
Salesforce Email Service Zero-Day Exploited in Phishing Campaign Eduard Kovacs
Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign. The post Salesforce Email Service Zero-Day Exploited in Phishing Campaign appeared first on SecurityWeek. Read More
-
Software Supply Chain Startup Endor Labs Scores Massive $70M Series A Round Ryan Naraine
Endor Labs has closed a massive $70 million Series A round of financing to fuel ambitious plans to build a dependency lifecycle management platform. The post Software Supply Chain Startup Endor Labs Scores Massive $70M Series A Round appeared first on SecurityWeek. Read More
-
Microsoft Exposes Russian Hackers’ Sneaky Phishing Tactics via Microsoft Teams Chats [email protected] (The Hacker News)
Microsoft on Wednesday disclosed that it identified a set of highly targeted social engineering attacks mounted by a Russian nation-state threat actor using credential theft phishing lures sent as Microsoft Teams chats. The tech giant attributed the attacks to a group it tracks as Midnight Blizzard (previously Nobelium). It’s also called APT29, BlueBravo, Cozy Bear, Iron Hemlock,…
-
Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability [email protected] (The Hacker News)
Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EPMM), prompting Ivanti to urge users to update to the latest version of the software. Tracked as CVE-2023-35082 (CVSS score: 10.0) and discovered by Rapid7, the issue “allows unauthenticated attackers to access the API in older…
-
Microsoft Catches Russian Government Hackers Phishing with Teams Chat App Ryan Naraine
Microsoft says a Russian government-linked hacking group is using its Microsoft Teams chat app to phish for credentials at targeted organizations. The post Microsoft Catches Russian Government Hackers Phishing with Teams Chat App appeared first on SecurityWeek. Read More
-
Shield and Visibility Solutions Target Phishing From Inside the Browser Kevin Townsend
Menlo Security introduced anti-phishing solutions that analyze what users see on a landing page rather than just analyzing the content of an email. The post Shield and Visibility Solutions Target Phishing From Inside the Browser appeared first on SecurityWeek. Read More
-
Citrix NetScaler ADC and NetScaler Gateway Unauthenticated Remote Code Execution Vulnerability (CVE-2023-3519)
What is Citrix NetScaler ADC and NetScaler Gateway? Citrix NetScaler ADC, previously known as Citrix ADC, is an Application Delivery Controller (ADC) designed to achieve secure and optimized network traffic. Citrix NetScaler Gateway, previously known as Citrix Gateway, is an SSL-VPN solution designed to provide secure and optimized remote access. What is the Attack? According…
-
New hVNC macOS Malware Advertised on Hacker Forum Ionut Arghire
A new macOS-targeting hVNC malware family is being advertised on a prominent cybercrime forum. The post New hVNC macOS Malware Advertised on Hacker Forum appeared first on SecurityWeek. Read More