DarkReading
When abused by threat actors with sophisticated social-engineering chops, remote-access tools demand that enterprises remain sharp in both defense strategy and employee-awareness training.
SecurityWeek
Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day.
Cyber Security News
To address a zero-day vulnerability in its Safari web browser that was exploited during this year's Pwn2Own Vancouver hacking competition,
The Hacker News
Beware of Storm-1811! This financially motivated group is abusing Microsoft's Quick Assist tool in social engineering attacks.
The Hacker News
Google fixes critical zero-day vulnerability in Chrome. CVE-2024-4947, a type confusion bug in the V8 JavaScript engine, has been actively exploited b
SecurityWeek
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
.webp)
Cyber Security News
Cybercriminals have been exploiting GitHub, a platform widely trusted by developers, to host malicious infrastructure.
Security Affairs
Adobe addressed multiple code execution vulnerabilities in several products, including Adobe Acrobat and Reader.
SecurityWeek
Apple and Google have rolled out a new mobile feature that warns users of unwanted trackers moving with them.
SecurityWeek
Microsoft patched 60 security bugs in multiple products and waned of an actively exploited Windows zero-day (CVE-2024-30051)
SecurityWeek
Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.
Bleeping Computer
Apple has released security updates to fix a zero-day vulnerability in the Safari web browser exploited during this year's Pwn2Own Vancouver hacking competition.
Infosecurity News
Recorded Future details a novel campaign that abuses legitimate internet services to deploy multiple malware variants for credential theft
The Hacker News
Google has released emergency fixes for a new zero-day vulnerability (CVE-2024-4761) that has been actively exploited in the wild.
SecurityWeek
Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week.
The Hacker News
pple and Google just rolled out a cross-platform feature called "Detecting Unwanted Location Trackers" (DULT) on iOS and Android to protect users.
Krebs on Security
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS…
Bleeping Computer
A new package mimicked the popular 'requests' library on the Python Package Index (PyPI) to target macOS devices with the Sliver C2 adversary framework, used for gaining initial access to corporate networks.
Bleeping Computer
Apple has backported security patches released in March to older iPhones and iPads, fixing an iOS zero-day tagged as exploited in attacks.
Bleeping Computer
Apple has backported security patches released in March to older iPhones and iPads, fixing an iOS Kernel zero-day tagged as exploited in attacks.
Security Affairs
Apple rolled out urgent security updates to address code execution vulnerabilities in iPhones, iPads, and macOS.
SecurityWeek
Apple documents another zero-day flaw being exploited on older iPhones and documents security problems in macOS, iOS and iPadOS.
Ars Technica
GPT-4o demo shows new AI model singing a bedtime story, detecting user's facial expressions.
Cyber Security News
An attacker published a malicious package on PyPI named "requests-darwin-lite," masquerading as a variant of the popular "requests" library,
Cyber Security News
The latest version of Nmap, the renowned network exploration tool and security scanner, 7.95, has been officially released. It brings many performance improvements, new features, and bug fixes.
SecurityWeek
Chinese hacking contest Matrix Cup is offering rewards for exploits targeting OS, smartphones, enterprise software, and security products.
SC Magazine
The “requests-darwin-lite” package was downloaded more than 400 times before its removal.
.png)
Cyber Security News
Staying informed is the key in this dynamic battle of cybersecurity, and due to this, the weekly news recap provides you with the newest trends, weaknesses, infringements found, and some possible defense mechanisms.
Ars Technica
Exploit code for critical "use-after-free" bug is circulating in the wild.
Cyber Security News
Security researchers have uncovered a new technique called "TunnelVision" that exposes a fundamental flaw in routing-based Virtual Private Networks (VPNs),
The Hacker News
Google has just released an update to patch a new zero-day flaw, CVE-2024-4671, which hackers are actively exploiting in the wild.
Computerworld
It's essential reading for IT admins, security researchers and anyone with an interest in Apple security, now updated for 2024.
Bleeping Computer
Get Microsoft Office Professional Plus 2019 for Windows and Microsoft Office Home & Business 2019 for Mac for $29.97, $200 off the $229 MSRP, through the end of May 12th, 2024.
The Hacker News
Researchers have uncovered a vulnerability (CVE-2024-3661) that allows threat actors to snoop on your VPN traffic.
Bleeping Computer
Every file can potentially be corrupted, and having a repair utility is a great backup to your backup. EaseUS's Fixo app for Windows and Mac can help for $49.99, $70 off the $119.95 MSRP.
Bleeping Computer
A new attack dubbed "TunnelVision" can route traffic outside a VPN's encryption tunnel, allowing attackers to snoop on unencrypted traffic while maintaining the appearance of a secure VPN connection.
HACKRead
Cybersecurity researchers from Mac security provider, Kandji, have discovered a new malware dubbed "Cuckoo" targeting macOS users.
.webp)
Cyber Security News
Cybersecurity researchers have uncovered a new malware strain dubbed "Cuckoo., exhibits characteristics of both spyware and an infostealer
CyberNews
Arm and Intel-based Macs are being targeted by a new dangerous malware, dubbed Cuckoo.
Cyber Security News
Best Active Directory Management Tools: 1. Microsoft AD Explorer 2. SolarWinds Permissions Analyzer 3. Netwrix 4.ManageEngine ADAudit Plus.
%20(1).webp)
Cyber Security News
Two vulnerabilities have been identified in pgAdmin of PostgreSQL which were associated with Cross-Site Scripting and Multi-Factor
The Hacker News
A new malware called "Cuckoo" is on the loose, targeting both Intel and ARM-based Macs.
.png)
Cyber Security News
The weekly news summary keeps you up to date with what’s happening in cybersecurity, including developments, vulnerabilities, breaches, threats, and defensive strategies. Knowing about new cyber risks and attack vectors helps you put up safeguards and preventive measures as soon as possible to protect your systems. Remaining constantly aware gives you a holistic view of […]
Bleeping Computer
Microsoft announced that Windows users can now log into their Microsoft consumer accounts using a passkey, allowing users to authenticate using password-less methods such as Windows Hello, FIDO2 security keys, biometric data (facial scans or fingerprints), or device PINs.
.webp)
Cyber Security News
Security researchers have uncovered four zero-day vulnerabilities within OpenVPN, the world's leading VPN solution.
Bleeping Computer
Off-site backups are important for everyone, from small businesses to freelancers. Get 500GB of cloud storage from Amaryllo for a one-time payment of $119.99, $130 off the $249 MSRP.
.webp)
Cyber Security News
A new variant of the notorious Adload malware has been discovered to bypass the latest updates to Apple's built-in antivirus, XProtect.
DarkReading
A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. Cyber defenders must keep pace.
Bleeping Computer
A VPN lets you connect anywhere with confidence that snoops and thieves won't be able to tap into your data. This two-year subscription to SurfShark VPN gives you unlimited bandwidth and device connection for $56.99, $233 off the $290 MSRP.
Cyber Security News
a previously undetected malware threat for macOS that exhibits characteristics of both an infostealer and spyware.
SecurityWeek
A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide.
SecurityWeek
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.
The Hacker News
North Korea's state-linked hackers are enhancing their operations with advanced artificial intelligence tools.
The Hacker News
A new variant of the RedLine Stealer malware has been discovered, utilizing Lua bytecode for stealth and effectiveness.
Bleeping Computer
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.
Bleeping Computer
A preview of Microsoft Office LTSC 2024, a volume-licensed and perpetual version of Office for commercial customers, is now available for Windows and macOS users.
.webp)
Cyber Security News
Tor Browser 13.0.14 has been released, bringing important security updates to the popular privacy-focused web browser.
SecurityWeek
Chrome and Firefox security updates resolve over 35 vulnerabilities, including a dozen high-severity bugs.
DarkReading
A Russian-language campaign impersonates legitimate game operations to spread cross-platform infostealers.
Cyber Security News
The weekly cybersecurity news wrap-up provides readers with the latest information on emerging risks, vulnerabilities, ways to reduce them, and harmful schemes to help make defensive measures proactive.
Cyber Security News
DuckDuckGo is a search engine that takes users' privacy seriously. It does not track or store personal information.
Bleeping Computer
Get Microsoft Office Professional Plus 2019 for Windows and Microsoft Office Home & Business 2019 for $31.99.
DarkReading
North Korean hackers break ground with new exploitation techniques for Windows and macOS.
DarkReading
North Korean hackers break ground with new exploitation techniques for Windows and macOS.
Cyber Security News
A product security incident response team (PSIRT) manages a vulnerability disclosure program by acting as a single point of contact for
The Cyber Express
Claims of a 'high-risk' vulnerability allegedly found in Telegram's desktop application appear to have been dismissed after Telegram addressed the
Computerworld
Unified endpoint management software lets IT manage all endpoint devices — smartphones, laptops, desktops, printers, IoT devices, and others — from a single management console. Here’s what to look for in a UEM platform and key vendors to consider.
SecurityWeek
Adobe calls attention to a pair of code execution bugs in Adobe Commerce and Magento Open Source, a product used to manage online stories.
Security Affairs
Google announced support for a V8 Sandbox in the Chrome web browser to protect users from exploits triggering memory corruption issues.
The Hacker News
Google tackles Chrome security with new V8 Sandbox. This aims to stop memory issues from spreading, protecting your browser experience.
SecurityWeek
Google fights Chrome V8 engine memory safety bugs with a new sandbox and adds it to the bug bounty program.
Security Affairs
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
SecurityWeek
Google pushes a new Chrome update to patch another zero-day vulnerability demonstrated at a hacking contest.
Cyber Security News
Google has unveiled a new web feature called "Device Bound Session Credentials (DBSC)" that will help protect users from cookie theft.
Bleeping Computer
Google announced a new Chrome security feature that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts.
Infosecurity News
A backdoor in XZ Utils, a widely used file-compressing software in Linux systems, could have led to a critical supply chain attack had a Microsoft researcher not spotted it in time
Security Affairs
Experts warn of info stealer malware, including Atomic Stealer, targeting Apple macOS users via malicious ads and rogue websites.
Cyber Security News
Over the past year, macOS users, particularly those in the cryptocurrency sector, have been increasingly targeted by infostealers.
.png)
Cyber Security News
This weekly cybersecurity news recap keeps you informed about the latest threats, exposures, mitigation techniques, and emerging malicious tactics that could compromise systems.
The Hacker News
Malicious ads and fake websites are spreading dangerous malware that can steal your passwords, cryptocurrency, and other sensitive data.
DarkReading
In this Tech Tip, we outline how to check if a system is impacted by the newly discovered backdoor in the open source xz compression utility.
Bleeping Computer
Get Microsoft Office Professional Plus 2019 for Windows and Microsoft Office Home & Business 2019 for Mac for $29.977, $200 off the $230 MSRP, through 11:59pm PST on April 2nd.
SC Magazine
The critical supply chain threat affects beta releases of Red Hat Fedora, Debian and more.
SecurityWeek
The Python Package Index (PyPI) repository suspended new project creation and new user registration to mitigate a malware upload campaign.
CyberNews
Commercial spyware vendors such as NSO Group, Intellexa, Candiru, and Cy4Gate were the most productive in discovering new exploits to target users.
SecurityWeek
Google ships a security-themed Chrome browser refresh to fix flaws exploited at the CanSecWest Pwn2Own hacking contest.
.png)
Cyber Security News
CVE-2024-193 - vulnerability arises from how TeamViewer Client handled symbolic links before version 15.52 for macOS.
The Record
Cybersecurity experts are warning that zero-day exploits, which can be used to compromise devices before anyone is aware they’re vulnerable, have become more common as nation-state hackers and cybercriminals find sophisticated ways to carry out their attacks.
DarkReading
CVE-2024-1580 allows remote attackers to execute arbitrary code on affected devices.
Cyber Security News
A critical flaw impacting macOS has been uncovered that gives unauthorized users, including those with guest access, the capacity to escalate privileges and take complete root control of the system.
SecurityWeek
Apple has released iOS 17.4.1 and macOS Sonoma 14.4.1 with patches for an arbitrary code execution vulnerability.
CyberNews
Apple has chosen China’s search giant Baidu to provide AI features for its products in the country, including the upcoming iPhone 16, local media has reported.
SecurityWeek
More than 100 organizations in the US and EU have been targeted in recent StrelaStealer infostealer campaigns.
Bleeping Computer
A new side-channel attack called "GoFetch" impacts Apple M1, M2, and M3 processors and can be used to steal secret cryptographic keys from data in the CPU's cache.
The Cyber Express
An unpatchable vulnerability in Apple's M-series chips has been reported. The Apple M-series chip vulnerability could potentially leak secret encryption
Bleeping Computer
Pwn2Own Vancouver 2024 has ended with security researchers collecting $1,132,500 after demoing 29 zero-days (and some bug collisions).
Ars Technica
Fixing newly discovered side channel will likely take a major toll on performance.
.webp)
Cyber Security News
A threat actor has announced the sale of an exploit targeting a vulnerability in Foxit Reader, a widely used PDF viewer.
Bleeping Computer
On the first day of Pwn2Own Vancouver 2024, contestants demoed Windows 11, Tesla, and Ubuntu Linux zero-day vulnerabilities and exploit chains to win $732,500 and a Tesla Model 3 car.
Bleeping Computer
Oracle warned Apple customers to delay installing the latest macOS 14.4 Sonoma update because it will break Java on ARM-based Macs.
Loading more articles....