Hackers exploit poorly secured Google Cloud platform to mine crypto
Compromised Google Cloud accounts used to mine cryptocurrency and abuse the system Ransomware can be installed and phishing campaigns launched on the compromised machine
Know the risks before they reach you
News
New Linux malware CronRAT hides in tasks set to execute on February 31
Researchers found a RAT with never-before-seen stealth tactics – masking the actions with the non-existent calendar day Security experts discovered the remote access trojan
News, Web browsers and vulnerabilities
New Windows Installer zero-day exploit abused by hackers
Researchers report the powerful elevation-of-privilege flaw allowing arbitrary code execution on fully-patched systems Attackers making attempts to exploit the major security vulnerability, researchers report.
Threat actors target the Middle East with advanced Android Spyware
The new variants of Android malware linked with a known APT group Reports about the Middle Eastern APT group and the new Android spyware
News, Web browsers and vulnerabilities
Major code execution bug in Imunify360 Linux server got patched
The vulnerability exploitation could be used to hijack web servers Imunify360 flaw left Linux web servers open for the code execution attacks and takeover,
Facebook Messenger and Instagram E2E encryption delayed until 2023
The default end-to-end encryption across messaging services pushed back by a year at least Facebook says that due to user safety, the encryption is
Spear-phishing attacks abuse the Glitch platform to steal credentials
Glitch service abused in attacks that target Middle East workers from major corporations Actors release campaigns aiming to gather information about the employees of
Microsoft and US, UK law enforcement warns about Iranian hacker groups
Hacker groups reportedly exploiting Microsoft, Fortinet flaws and increase the use of ransomware on targets Nation-state threat actors target engage in social engineering campaigns,
New criminal tactics: exploit-as-a-service and buying zero-day flaws
Ransomware gangs raised funds to buy zero-day flaws and move to advanced exploit-as-a-service operations Malicious actors started to consider buying, leasing, selling zero-day vulnerabilities.
Moses Staff targets Israeli entities with ransomless encryption attack
Moses Staff hacker group launched the destructive malware attacks against political organizations in Israel Various firms in Israel were targeted by the attacker group
Hackers enter the FBI email system to send out fake security warnings
Legitimate-looking emails with bizarre cybersecurity warnings from FBI servers got sent to people The urgent warning about cyberattacks got distributed over the weekend. Hackers
News, Web browsers and vulnerabilities
Google warns about Mac zero-day flaw used against Hong Kong users already
Threat actors created Mac vulnerability that was used for the past three months to collect keystrokes, screenshots Hackers exploited a zero-day vulnerability on macOS
Void Balaur hackers-for-hire collect political and commercial victims
Researchers indicate the hacker group working for money that been actively attacking since 2015 The hacker-for-hire group named Void Balaur has been stealing emails
Nucleus:13 flaws affect devices used in the medical and aerospace sectors
13 critical vulnerabilities discovered in the Nucleus TCP/IP stack Researchers revealed that the pack of 13 security flaws in the Nucleus real-time operating system
7 million Robinhood customers impacted by the data breach
Trading app hack exposes the most extensive data of 300 users Robinhood – a commission-free investing tool and the widely used stock trading platform suffered