Snapchat and American Express users suffer from an open redirect flaw
Open redirect flaw exploited for phishing purposes Researchers have found that attackers are exploiting an open redirect flaw to steal people's credentials and personally
Security
New Woody RAT malware targets Russian entities
Russian organizations in the eyesight of a new RAT A new RAT (Remote Access Trojan) has been discovered by security researchers called Woody RAT.
Malicious npm packages tapped to steal Discord users’ information
Malicious campaign to infect Discord users with malware in motion Cybercriminals are using the npm (node package manager) to hide malware that can steal
Google delays the third-party cookie blocking in Chrome to 2024
Google pushes the plan to block cookies from third parties yet again Google announced that the company once again delays the plan to turn
Malicious IIS extensions are used to improve persistence of backdoors
IIS extensions used to backdoor unpatched Exchange servers Threat actors rely on the Internet Information Services extensions to access servers because these extensions help
Fake LinkedIn job offers used to steal $540 million from Axie Infinity
The largest cryptocurrency heist started with a job offer in March $540 million hacks of Axie Infinity in late March of this year is
Microsoft rolls back the Office macros blocking until further notice
Microsft stops the plan to block malicious macros by default Microsft has announced before that VBA macros on downloaded documents will be blocked by
Apple Lockdown Mode protects iPhone, iPad, and Mac devices from spyware
Apple introduces a new security feature that protects devices against government spyware The news security feature known as Lockdown Mode was introduced by Apple.
Google fights the actively exploited zero-day flaw with Chrome updates
Google patches the new Chrome zero-day flaw that was already exploited in attacks Google pushes the security update to address the high-severity vulnerability in
OpenSea has to report a major breach and customer email data leak
NFT giant suffers a massive leak of users' email addresses The biggest and the most influential NFT marketplace, OpenSea issued a warning for users.
A multistage ZuoRAT has been targeting a wide range of SOHO routers
New unusual malware targets home-office routers to spy on networks ZuoRAT malware targets SOHO routers in North America and Europe. Hackers have employed the
LGBTQ+ community warned by FTC: extortionists abuse dating apps
Extortion scammers target the LGBTQ+ community on Feeld and Grindr dating applications The Federal Trade Commission of the United States has issued a warning
Russian hackers use Cobalt Strike and CredoMap malware against Ukraine
Stat-backed attackers hit Ukraine with phishing campaigns spreading malware Ukrainian organizations warned about hacking attempts using CredoMap malware and Cobalt Strike beacons. Russian hackers
Magecart attacks becoming more stealthy: ongoing campaign report
Newly discovered attacks show the bigger scale of the Magecart infrastructure campaign These newly reported Magecart skimming campaigns show many similarities with the previous
New NTLM relay attack: threat actor can control the Windows domain
The attack named DFSCoerce leverages the Distributed File System to seize control of the domain A new Windows NTML relay attack has been discovered.