More results...
ThreatFabric warns of a dropper service bypassing recent Android security restrictions to install spyware and banking trojans.
The post Dropper Service Bypassing Android Security Restrictions to Install Malware appeared first on SecurityWeek.
New macOS malware, tracked by Jamf as ObjCShellz, is likely being used by North Korean hackers to target crypto exchanges
The post New MacOS Malware Linked to North Korean Hackers appeared first on SecurityWeek.
The Iran-linked APT Agrius has been targeting higher education and technology organizations in Israel with new wipers.
The post Iranian APT Targets Israeli Education, Tech Sectors With New Wipers appeared first on SecurityWeek.
Security researchers uncover new macOS and Windows malware associated with the North Korea-linked Lazarus Group.
The post North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks appeared first on SecurityWeek.
The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10.
The post Apache ActiveMQ Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.
The recent shutdown of the Mozi botnet is believed to have been carried out by its creators, possibly forced by Chinese authorities.
The post Mozi Botnet Likely Killed by Its Creators appeared first on SecurityWeek.
Check Point reports that an Iranian APT has been observed using a new malware framework in targeted attacks in the Middle East.
The post Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks appeared first on SecurityWeek.
Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway.
The post Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway appeared first on SecurityWeek.
Threat actors are constantly publishing malicious NuGet packages to automatically execute code on developers’ machines.
The post Malicious NuGet Packages Abuse MSBuild Integrations for Code Execution appeared first on SecurityWeek.
Researchers document the Wiki-Slack attack, a new technique that uses modified Wikipedia pages to target end users on Slack.
The post Attackers Can Use Modified Wikipedia Pages to Mount Redirection Attacks on Slack appeared first on SecurityWeek.