There are dozens of ways that threat actors profit off of their victims. The most attractive feature of cryptocurrency for hackers is likely the permanence: when money is sent, you cannot get it back....
BladeHawk attackers have been targeting the Kurdish ethnic group for more than a year through a Facebook-based spyware campaign that disguises backdoors in legitimate Android apps, researchers have found. click here to read full...
The novel backdoor technique called SideWalk, seen in campaigns targeting US media and retailers late last month, has been tied to an adversary that’s been around for quite a while: namely, China-linked Grayfly espionage...
The TeamTNT malware pushers have a slew of new toys that have inflicted more than 5,000 infections globally as antivirus (AV) tools struggle to catch up with the newest malware. click here to read...
Two security vulnerabilities have been found in the Gutenberg Template Library & Redux Framework plugin for WordPress, which is installed on more than 1 million websites. click here to read full Article Read more...
Google will record the location of whatever phone a person has logged into. So, it’s not even necessary for someone to install one of the insidious stalkerware apps that have flooded the marketplace. click...
An attacker was apparently able to breach the site for famed street artist Banksy and sell a fake NFT of the artist’s work for more than $336,000. The fraudster has since returned the ill-gotten...
More details about a now-patched vulnerability in Comcast’s XR11 voice remotes have emerged, which would have made it easy for a threat actor to intercept radio frequency (RF) communications. click here to read full...
A pair of security vulnerabilities in the WooCommerce Dynamic Pricing and Discounts plugin from Envato could allow unauthenticated attackers to inject malicious code into websites. click here to read full Article Read more on...
Cataclysmic breaches and shortage of a trained cybersecurity workforce prompted the Biden Administration to haul a collection of the biggest names in business into a White House cybersecurity summit, to talk about what they...
He impersonated an Apple customer support technician in a socially engineered email campaign that stole people’s iCloud passwords to break into accounts and collect their private photos and videos. click here to read full...
Microsoft decided to address this EoP bug, reaching out to Project Zero to let the researchers know that it had decided to work on the issue despite initially stating that it was “out of...
The authentication protocols used by security systems must be flawless. But there’s no such thing as a flawless system, and implementation errors can lead to hazardous security vulnerabilities. click here to read full Article...
Google removed eight deceptive mobile apps from the Play Store that masquerade as cryptocurrency cloud-mining applications but which really exist to lure users into expensive subscription services. click here to read full Article Read...
Cloud marketplaces are rife with pre-built virtual machine (VM) images containing unpatched vulnerabilities, overly permissive firewall settings, and even malware and coin miners. click here to read full Article Read More on latest vulnerability...
Research shows that the cost of phishing attacks has nearly quadrupled over the past six years: Large U.S. companies are now losing, on average, $14.8 million annually, or $1,500 per employee. click here to...
