Rss Bot

A second APT, potentially linked to the Chinese government, could be behind the Supernova malware. View the full article

Researchers warn that the Hildegard malware is part of 'one of the most complicated attacks targeting Kubernetes.' View the full article

The by-now infamous company has issued patches for three security vulnerabilities in total. View the full article

The sophisticated backdoor steals SSH credentials for servers in academic and scientific high-performance computing clusters. View the full article

Enhanced Explosive RAT and Caterpillar tools are at the forefront of a global espionage campaign. View the full article

The flaw in the free-source library could have been ported to multiple applications. View the full article

Researchers allege that software used for downloading Android apps onto PCs and Macs has been compromised to install malware onto victim devices. View the full article

The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites. View the full article

Fuji Electric’s Tellus Lite V-Simulator and V-Server Lite can allow attackers to take advantage of operational technology (OT)-IT convergence on factory floors, at utility plants and more. View the full article

Apple has made structural improvements in iOS 14 to block message-based, zero-click exploits. View the full article

The Pro-Ocean cryptojacking malware now comes with the ability to spread like a worm, as well as harboring new detection-evasion tactics. View the full article

A phishing kit has been found running on at least 700 domains - and mimicking services via false SharePoint, OneDrive and Office 365 login portals. View the full article

A growing number of cybersecurity vendors like CrowdStrike, Fidelis, FireEye, Malwarebytes, Palo Alto Networks and Qualys are confirming being targeted in the espionage attack. View the full article

This post is originally published on Designmodo: A Guide to Making Your Images and Videos Accessible When you think of accessibility, do you envision things like ramps outside of restaurants or handicap bathroom stalls? While consumers have long fought for equal access to places of public accommodation, it’s no longer just in the physical world where … For more information please contact Designmodo View the full article

A new version of NAT slipstreaming allows cybercriminals an easy path to devices that aren't connected to the internet. View the full article

Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. View the full article

Researchers publicly disclosed flaws in ADT's LifeShield DIY HD Video Doorbell, which could have allowed local attackers to access credentials, video feeds and more. View the full article

An anonymous researcher identified bugs in the software’s kernel and WebKit browser engine that are likely part of an exploit chain. View the full article

If exploited, the most serious of these flaws could lead to a denial-of-service condition for Jetson products. View the full article

An unmonitored account belonging to a deceased employee allowed Nefilim to exfiltrate data and infiltrate systems for a month, without being noticed. View the full article

Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor. View the full article

A security flaw in TikTok could have allowed attackers to query query the platform's database – potentially opening up for privacy violations. View the full article

The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. View the full article

The security vendor is investigating potential zero-day vulnerabilities in its Secure Mobile Access (SMA) 100 series. View the full article

The "KindleDrip" attack would have allowed attackers to siphon money from unsuspecting victims. View the full article