British police have made a series of arrests over the past few months after people with apparent access to NHS databases allegedly sold fake vaccination status entries on the NHS vaccine passport app. This week …
Lenovo laptops, including ThinkPad and Yoga models, are vulnerable to a privilege elevation bug in the ImControllerService service allowing attackers to execute commands with admin privileges. The flaws are tracked as CVE-2021-3922 and CVE-2021-3969 and affect …
Lenovo laptops vulnerable to bug allowing admin privileges Read More »
The Hive ransomware gang is more active and aggressive than its leak site shows, with affiliates attacking an average of three companies every day since the operation became known in late June. Security researchers gleaning …
Hive ransomware enters big league with hundreds breached in four months Read More »
Cybersecurity researchers have demonstrated a new attack technique that makes it possible to leverage a device’s Bluetooth component to directly extract network passwords and manipulate traffic on a Wi-Fi chip. The novel attacks work against …
Researchers Uncover New Coexistence Attacks On Wi-Fi and Bluetooth Chips Read More »
Google has explained how surveillance company NSO Group developed an exploit that would allow users of its software to gain access to an iPhone and install spyware – without a target ever even clicking a …
Google: This zero-click iPhone attack was incredible and terrifying Read More »
A suspected, state-sponsored Iranian threat group has attacked an airline with a never-before-seen backdoor. On Wednesday, cybersecurity researchers from IBM Security X-Force said an Asian airline was the subject of the attack, which likely began …
Suspected Iranian hackers target airline with new backdoor Read More »
Check Point Research has discovered new attacks targeting cryptocurrency users in Ethiopia, Nigeria, India and 93 other countries. The cybercriminals behind the attacks are using a variant of the Phorpiex botnet — which Check Point …
A new JavaScript-based remote access Trojan (RAT) propagated via a social engineering campaign has been observed employing sneaky “fileless” techniques as part of its detection-evasion methods to elude discovery and analysis. Dubbed DarkWatchman by researchers …
New Fileless Malware Uses Windows Registry as Storage to Evade Detection Read More »
The previously shutdown Phorpiex botnet has re-emerged with new peer-to-peer command and control infrastructure, making the malware more difficult to disrupt. The botnet first launched in 2016 and quickly accumulated a massive army of over …
Phorpiex botnet returns with new tricks making it harder to disrupt Read More »
Social media and search engine operators in Japan will be required to specify the countries in which users’ data is physically stored, under a planned tweak to local laws. The Ministry of Internal Affairs and …
Japan draws a LINE: web giants must reveal where they store user data Read More »
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit a second bug disclosed in the widely used Log4j logging utility, making it imperative that customers move quickly to install …
Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges Read More »
Signal released end-to-end encrypted group calls a year ago, and since then we’ve scaled from support for 5 participants all the way to 40. There is no off the shelf software that would allow us …
How to build large-scale end-to-end encrypted group video calls Read More »