iTunes zero-day exploited to install BitPaymer ransomware on Windows
Attackers use iTunes zero-day to bypass the detection of anti-virus software Security researchers from Morphisec discovered a new campaign that exploits a component in
News
Know the risks before they reach you
Methodist Hospitals data breach may has involved around 70K potential victims
Methodist Hospitals discovered two employee email accounts that have been exposing patient-related data In June 2019, the Methodist Hospitals launched an investigation due to
Twitter allowed 2FA data for filtering sponsored ad audiences
Twitter 2FA mobile phone numbers and email addresses made reachable for Partner Audiences and Tailor Audiences advertising services One of the most popular communication
Tū Ora Compass Health fails to secure sensitive data of million people
Health organization faces a data breach that exposed personal medical information of roughly 1 million people The primary health organization from New Zealand, Tū
FIFA 20 e-sports site leaked data of 1,600 pro players
Electronic Arts managed to shut down the compromised site within 30 minutes, although 1,600 participants' data was already exposed On October 3, EA Sports
Microsoft warns: Iranian hackers target 2020 U.S presidential campaign
Microsoft discovers recent Iranian hacking group Phosphorus campaigns that target politicians in the U.S Yesterday Microsoft disclosed that state-sponsored Iranian hackers tried to hack
News, Web browsers and vulnerabilities
Several Android phone models impacted by a critical zero-day vulnerability
The critical flaw that is exploited in the wild affects phone models from Samsung, Huawei, Pixel, and others Google security researcher and Project Zero
Delivering GIFs via WhatsApp could have resulted in Android phone hack
WhatsApp patches the flaw helping hackers to misuse the malicious code in GIF image libraries A potentially dangerous vulnerability helping hackers to execute commands
vBulletin zero-day used to leak data of 245,000 Comodo forum users
Security software maker Comodo admitted that it suffered data breach due to the vBulletin CVE-2019-16759 vulnerability The Comodo discussion forum, also known as ITarian has
Guilty plea: former Yahoo engineer hacked thousands of email accounts
6,000 Yahoo email accounts of mostly young females got hacked in search for sexual images On Monday, a former Yahoo software engineer Reyes Daniel
Zynga hack led to data disclosure of 218M “Words with Friends” players
New data breach disclosed: a serial hacker Gnosticplayers snatched data from 218 million “Words with Friends” gamers Zynga Inc., one of the most successful
Google deletes Play Store apps that overcharge Android users
Android app developers are found overcharging users after they forgot to cancel app trial period Google aimed to eliminate some applications from the Play
Nodersok malware uses its own LOLBins, turns PCs into proxy zombies
New fileless Nodersok malware brings Node.js and WinDiver LOLBins to operate a click-fraud scheme New dangerous malware strain has been spotted in the wild.
Code similarities show a technical relation between REvil and GandCrab
Researchers reveal code similarities between Sodinokibi/REvil and GandCrab: is the previous ransomware developer retirement fake? In-depth code analysis of REvil or Sodinokibi malware revealed
News, Web browsers and vulnerabilities
vBulletin versions 5.0.0 – 5.5.4 affected by zero-day RCE exploit
An unidentified hacker published zero-day vulnerability in vBulletin forum software package On Tuesday, a critical vBulletin zero-day flaw was published by an anonymous hacker and