The new TikTok Pro app steals passwords and other important data
Researchers encourage people to not download TikTok Pro due to malicious functions of data exfiltration Researchers have discovered new spyware disguised as the TikTok
News
Know the risks before they reach you
Researchers found crypto bugs in 306 popular Android apps
Columbia University researchers found bugs in 306 Google Play Store apps CRYLOGGER, a new dynamic tool developed by Columbia University academics, found crypto bugs
Ransomware gang claims they are behind the Newcastle University attack
Newcastle University has been hit by DoppelPaymer ransomware attack The DoppelPaymer ransomware operators claiming to be responsible for the attack that hit Newcastle University
Service NSW: hackers stole 738GB of customer data during email breach
Service NSW has revealed that 738 GB of customer data was stolen during an email breach Service NSW has revealed that the private information of
Evilnum group’s Python-based RAT impersonates legitimate programs
Evilnum ATP hacker group change tactics and targets financial firms with new Python-based malware The Advanced Persistent Threat group named Evilnum used Python remote
Warner Music Group has disclosed months-long web skimming incident
Warner Music Group finally found hackers responsible for compromising its online stores Warner Music Group (WMG) finally disclosed a data breach affecting customers' personal
Dark web moderator sentenced to 11 years in prison
Moderator of AlphaBay dark web marketplace sentenced to 11 years in prison Another person involved in the dark web marketplace is going to jail.
News, Web browsers and vulnerabilities
Zero-day flaw allows attacking Cisco IOS XR devices
Recently discovered zero-day flaw makes Cisco devices insecure Recently, Cisco warned about a new zero-day vulnerability in its IOS XR, called CVE-2020-3566. This flaw
Apple defenses bypassed: Shlayered apps accidentally allowed on macOS
Another OSX/Shlayer campaign spotted, and not even Apple's notarization process can stop it Apple's approach to security has been known to be among the most
Government has no clue who’s behind cyber attacks: NZX still suffering
The DDoS attack hit the New Zealand stock exchange, and the government tries to find the ones responsible for these cyberattacks The New Zealand
QBot operators change tactics to infect victims via hijacked email
Email threads can get hijacked by the QBot trojan, so other people get malware from your replies Data-stealing Qbot Trojan changed tactics to hijack
Russian offered $1 million to US company employee for malware planting
Russian hacker charged for trying to hire a person from Nevada-based company to spread malware The attacker tried to convince the US company insider
Hacker-for-hire group uses malicious 3Ds Max plugin to spread malware
APT hackers exploit 3Ds Max software to compromise computers of a luxury architecture firm Report surfaced about the APT hacker-for-hire operations and techniques used
Iranian hackers target international companies with Dharma ransomware
Companies in Russia, China, India, and Japan hit by Dharma ransomware with ransom demands of 1-5 Bitcoin The group of hackers released a new
News, Web browsers and vulnerabilities
Hackers may exploit a weakness in Google Drive to spread malware
The unpatched security flaw can allow attackers to send malicious documents and images with malware scripts The issue that resides in “manage versions” functionality