The Hacker News reports that a flaw in Broadcom’s Wi‑Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step. It was shown on home gateways from three Belgian internet providers, and no fix has been deployed to the affected routers. Windows users should check their router model and firmware status, and replace or isolate affected gear if no patch is available.
Source: thehackernews.com
…
The Hacker News reports that UAT-11985 used fake event invites and malicious QR codes to target people affiliated with Taiwan research organizations. The phishing pages copied Google login screens to steal Google account credentials and MFA codes, so Windows users should be careful with event invitations, avoid scanning unknown QR codes, and check the sender and sign-in page before entering any login details.
Source: thehackernews.com
The Hacker News reports that a malicious npm package called imgdecode is part of the MALFEX campaign targeting Windows systems. The package hides a loader in a Windows native addon and can download encrypted shellcode from GitHub, then inject it into a new dllhost.exe process. Windows users should avoid untrusted npm packages and check what software they install from developer tools and command lines.
Source: thehackernews.com
Malwarebytes Labs reports that Google has released Chrome 155.0.8059.79/.80 for Windows, and the update fixes 37 security flaws, including seven rated Critical. The easiest option is to let Chrome update automatically, but if the browser has not closed in a while or an extension blocks the update, open About Google Chrome and relaunch after checking for updates.
Source: malwarebytes.com
