Apache ActiveMQ bug exploited to deliver Kinsing malware
Attackers are exploiting a recently fixed vulnerability (CVE-2023-46604) in Apache ActiveMQ to install Kinsing malware and cryptocurrency miners on targeted Linux systems. CVE-2023-46604 exploitation Apache ActiveMQ is a popular Java-based open sourc.....»»
Chinese hackers hijacked an ISP software update to spread malware
StormBamboo used DNS poisoning to successfully attack organizations using insecure updates......»»
Chinese hackers compromised an ISP to deliver malicious software updates
APT StormBamboo compromised a undisclosed internet service provider (ISP) to poison DNS queries and thus deliver malware to target organizations, Volexity researchers have shared. Malware delivery via automatic software updates StormBamboo (aka Evasi.....»»
MISP: Open-source threat intelligence and sharing platform
MISP is an open-source threat intelligence and sharing platform for collecting, storing, distributing, and sharing cybersecurity indicators and threats related to incident and malware analysis. MISP is designed by and for cybersecurity, ICT professio.....»»
Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential for reducing business risk In this Help Net Security interview, Eran Livne, Senior Director of P.....»»
Mac malware posing as apps like Loom, LedgerLive, and Black Desert Online
A “sophisticated and alarming” Mac malware attack is being carried out in the guise of free versions of popular apps like the screen recording utility Loom, cryptocurrency manager LedgerLive, and MMO game Black Desert Online. It appears to be.....»»
Google Ads used to distribute Mac malware disguised as "Loom" app
Experts recently discovered a macOS stealer malware disguised as the popular screen recording app Loom, spread through deceptive Google-sponsored URLs.Crazy Evil malwareMoonlock Lab found a sophisticated macOS stealer malware disguised as Loom, orche.....»»
Synack PTaaS platform offers complete security testing suite
Synack has unveiled additional capabilities of its Penetration Testing as a Service (PTaaS) platform that deliver a comprehensive security testing experience. The Synack platform now covers all customers’ security testing needs, from attack sur.....»»
California"s State Water Project supplies could fall up to 23% within 20 years due to climate change
Climate change threatens to dramatically shrink the amount of water California can deliver over the next 20 years and could reduce supplies available from the State Water Project by up to 23%, according to new projections released July 31 by Gov. Gav.....»»
Scary Android malware steals your money then wipes your device
A new Android malware currently making the rounds is about as terrifying as any we’ve seen in recent months. Researchers from Cleafy Labs say that … The post Scary Android malware steals your money then wipes your device appeared first on.....»»
Staples is selling student laptops with massive discounts this week
Take home one of these awesome student laptop deals when you purchase through Staples. Both models deliver exceptional power and performance across the board......»»
SMS Stealer malware targeting Android users: Over 105,000 samples identified
Zimperium’s zLabs team has uncovered a new and widespread threat dubbed SMS Stealer. Detected during routine malware analysis, this malicious software has been found in over 105,000 samples, affecting more than 600 global brands. SMS Stealer.....»»
Multi-state Apple fraud ring exposed by DHS after routine traffic stop
The Department of Homeland Security busted a sophisticated counterfeiting operation where fraudsters exploited retail return policies to swap genuine Apple products with counterfeit devices nationwide.The Department of Homeland SecurityChalvin Tan wa.....»»
Mysterious family of malware hid in Google Play for years
Mandrake's ability to go unnoticed was the result of designs not often seen in Android malware. Enlarge A mysterious family of Android malware with a demonstrated history of effectively concealing its myriad spying acti.....»»
Repair kit for NASA"s NICER mission heading to space station
NASA will deliver a patch kit for NICER (Neutron star Interior Composition Explorer), an X-ray telescope on the International Space Station, on the agency's Northrop Grumman 21st commercial resupply mission. Astronauts will conduct a spacewalk to com.....»»
Apple AirPods drop to all-time low price of $69.99 at Amazon, AirPods Pro 2 dip to $179.99
Amazon's month-end AirPods deals deliver the lowest prices on the earbuds, with discounts of up to 46% off.Grab AirPods at the all-time low price.If you're looking to pick up a new pair of AirPods or are just jumping into the AirPods scene, Amazon ha.....»»
Parasite engineered to deliver therapy proteins to nerve cells
An international team of neurobiologists has developed a way to use a parasite to deliver protein therapies through the blood–brain barrier to treat nerve cell disorders. In their study published in Nature Microbiology, the group engineered the par.....»»
VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)
Ransomware operators have been leveraging CVE-2024-37085, an authentication bypass vulnerability affecting Active Directory domain-joined VMware ESXi hypervisors, to gain full administrative access to them and encrypt their file system. VMware owner.....»»
Review: Action1 – Simple and powerful patch management
Although endpoint anti-malware and other security controls are now standard at the operating system level, keeping all endpoint software up-to-date and secure remains an open issue for many organizations. Patch management is not yet a commodity, and.....»»
Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)
CVE-2023-45249, a critical vulnerability affecting older versions of Acronis Cyber Infrastructure, is being exploited by attackers. About Acronis Cyber Infrastructure Acronis is a privately held Swiss cybersecurity and data protection technology comp.....»»
Globular cluster NGC 6558 explored with Gemini Observatory and Hubble Space Telescope
Using the Gemini Observatory and the Hubble Space Telescope (HST), an international team of astronomers has investigated a Galactic globular cluster known as NGC 6558. Results of the new study, published July 22 on the pre-print server arXiv, deliver.....»»