More and more malware is using Discord"s CDN for abuse
A report by Sophos has exposed the scale and variety of malware using the Discord's CDN: "Sophos products detected and blocked, just in the past two months, nearly 140 times the number of detections over the same period in 2020," said authors Sean Ga.....»»
Tackling digital sexual violence in Canada requires updated policies and procedures
Online abuse affects one in six school-aged children, according to a recent World Health Organization survey of Europe, Asia and Canada. This statistic is just the tip of the iceberg when it comes to online abuse, though, as this issue affects more t.....»»
Ransomware gang targets IT workers with new RAT masquerading as IP scanner
Ransomware-as-a-service outfit Hunters International is wielding a new remote access trojan (RAT). “The malware, named SharpRhino due to its use of the C# programming language, is delivered through a typosquatting domain impersonating the legit.....»»
Mac and Windows users infected by software updates delivered over hacked ISP
DNS poisoning attack worked even when targets used DNS from Google and Cloudflare. Enlarge (credit: Marco Verch Professional Photographer and Speaker) Hackers delivered malware to Windows and Mac users by compromising th.....»»
Hacked ISP infects users receiving unsecure software updates
DNS poisoning attack worked even when targets used DNS from Google and Cloudflare. Enlarge (credit: Marco Verch Professional Photographer and Speaker) Hackers delivered malware to Windows and Mac users by compromising th.....»»
Misinformation, abuse and injustice: Breaking down the Olympic boxing firestorm
In a preliminary women's under 66kg boxing match at the Paris Olympics last week between Algerian Imane Khelif and Italian Angela Carini, a powerful punch to the face resulted in Carini withdrawing after 46 seconds......»»
Study reveals prevalence of child sexual abuse in religious settings
One in 250 Australians were sexually abused during childhood by a leader or other adult in a religious organization, new research led by Australian Catholic University shows......»»
Chinese hackers hijacked an ISP software update to spread malware
StormBamboo used DNS poisoning to successfully attack organizations using insecure updates......»»
Chinese hackers compromised an ISP to deliver malicious software updates
APT StormBamboo compromised a undisclosed internet service provider (ISP) to poison DNS queries and thus deliver malware to target organizations, Volexity researchers have shared. Malware delivery via automatic software updates StormBamboo (aka Evasi.....»»
MISP: Open-source threat intelligence and sharing platform
MISP is an open-source threat intelligence and sharing platform for collecting, storing, distributing, and sharing cybersecurity indicators and threats related to incident and malware analysis. MISP is designed by and for cybersecurity, ICT professio.....»»
Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential for reducing business risk In this Help Net Security interview, Eran Livne, Senior Director of P.....»»
Mac malware posing as apps like Loom, LedgerLive, and Black Desert Online
A “sophisticated and alarming” Mac malware attack is being carried out in the guise of free versions of popular apps like the screen recording utility Loom, cryptocurrency manager LedgerLive, and MMO game Black Desert Online. It appears to be.....»»
Google Ads used to distribute Mac malware disguised as "Loom" app
Experts recently discovered a macOS stealer malware disguised as the popular screen recording app Loom, spread through deceptive Google-sponsored URLs.Crazy Evil malwareMoonlock Lab found a sophisticated macOS stealer malware disguised as Loom, orche.....»»
Scary Android malware steals your money then wipes your device
A new Android malware currently making the rounds is about as terrifying as any we’ve seen in recent months. Researchers from Cleafy Labs say that … The post Scary Android malware steals your money then wipes your device appeared first on.....»»
SMS Stealer malware targeting Android users: Over 105,000 samples identified
Zimperium’s zLabs team has uncovered a new and widespread threat dubbed SMS Stealer. Detected during routine malware analysis, this malicious software has been found in over 105,000 samples, affecting more than 600 global brands. SMS Stealer.....»»
Lawmakers ask FTC to investigate the sale of driver data, alleging ‘flagrant abuse" of privacy
Automakers, which have made lofty revenue projections about the riches to be found in the sale of connected vehicle data, have largely sought to ignore the fact that consumers do not want their data to be sold......»»
Mysterious family of malware hid in Google Play for years
Mandrake's ability to go unnoticed was the result of designs not often seen in Android malware. Enlarge A mysterious family of Android malware with a demonstrated history of effectively concealing its myriad spying acti.....»»
Diocese of Scranton finds Msgr. Kelly guilty of child sexual abuse under canon law
Diocese of Scranton finds Msgr. Kelly guilty of child sexual abuse under canon law.....»»
Review: Action1 – Simple and powerful patch management
Although endpoint anti-malware and other security controls are now standard at the operating system level, keeping all endpoint software up-to-date and secure remains an open issue for many organizations. Patch management is not yet a commodity, and.....»»
More money, empowerment—and less chance of domestic abuse for women working in coffee industry
Economist Deniz Sanin was at Starbucks when a bag of specialty coffee from Rwanda caught her eye. "I Googled it right away," she recalled. "It turns out, there's been a coffee boom in the country.".....»»
Chrome will now prompt some users to send passwords for suspicious files
Google says passwords and files will be deleted shortly after they are deep-scanned. (credit: Chrome) Google is redesigning Chrome malware detections to include password-protected executable files that users can upload f.....»»