A new malware named ‘DarkWatchman’ has emerged in the cybercrime underground, and it’s a lightweight and highly-capable JavaScript RAT (Remote Access Trojan) paired with a C# keylogger. According to a technical report by researchers at …
New stealthy DarkWatchman malware hides in the Windows Registry Read More »
Western Digital is urging customers to update their WD My Cloud devices to the latest available firmware to keep receiving security updates on My Cloud OS firmware reaching the end of support. On April 15, …
Western Digital warns customers to update their My Cloud devices Read More »
The Debian Project announced today the general availability of Debian GNU/Linux 11.2 as the second point release to the Debian GNU/Linux 11 “Bullseye” operating system series. Debian GNU/Linux 11.2 is here more than two months …
Debian GNU/Linux 11.2 “Bullseye” Released with 30 Security Updates and 64 Bug Fixes Read More »
All set for the weekend? Not so fast. Yesterday, BleepingComputer summed up all the log4j and logback CVEs known thus far. Ever since the critical log4j zero-day saga started last week, security experts have time and time …
Upgraded to log4j 2.16? Surprise, there’s a 2.17 fixing DoS Read More »
Four affiliated online sports gear sites have disclosed a cyberattack where threat actors stole credit cards for 1,813,224 customers. While not much is known about the attack, a law firm representing the four websites stated …
Credit card info of 1.8 million people stolen from sports gear sites Read More »
An Android app with more than 500,000 downloads from Google Play has been caught hosting malware that surreptitiously sends users’ contacts to an attacker-controlled server and signs up users to pricey subscriptions, a security firm …
Google Play app with 500,000 downloads sent user contacts to Russian server Read More »
Some threat actors exploiting the Apache Log4j vulnerability have switched from LDAP callback URLs to RMI or even used both in a single request for maximum chances of success. This shift is a notable development …
Log4j attackers switch to injecting Monero miners via RMI Read More »
VMware customers have probably had a busy week because more than 100 of the IT giant’s products are impacted by the Log4j bug. Now they need to make another urgent patching effort, because the virty …
Over Log4j? VMware has another critical flaw for you to patch Read More »
Facebook successor Meta on Thursday said it canceled 1,500 social media accounts used by seven surveillance-for-hire firms to conduct online attacks against government critics and members of civil society. These accounts were primarily used to …
IT recruitment firm Finite Recruitment has confirmed it experienced a cyber incident in October, which resulted in a “small subset” of the company’s data being downloaded and published on the dark web. The Finite Group …
NSW government casual recruiter suffers ransomware hit Read More »
The Cybersecurity and Infrastructure Security Agency and the White House have released warnings to companies and organizations across the country, urging them to be on alert for cyberattacks ahead of the Christmas holiday. CISA has …
CISA, White House urge organizations to get ready for holiday cyberattacks Read More »
British classifieds site Gumtree.com suffered a data leak after a security researcher revealed that he could access sensitive personally identifiable data of advertisers simply by pressing F12 on the keyboard. When pressing the F12 key …
Gumtree classifieds site leaked personal info via the F12 key Read More »