More results...
Threat actors are targeting Citrix NetScaler instances unpatched against CVE-2023-3519 to steal user credentials.
The post Credential Harvesting Campaign Targets Unpatched NetScaler Instances appeared first on SecurityWeek.
A global cybercriminal operation called BadBox has infected the firmware of more than 70,000 Android smartphones, CTV boxes, and tablets with the Triada malware.
The post Android Devices With Backdoored Firmware Found in US Schools appeared first on Se…
Qakbot cybercriminals continue to push malware, which shows they are still operational after the recent takedown attempt.
The post Qakbot Hackers Continue to Push Malware After Takedown Attempt appeared first on SecurityWeek.
Threat actor uses typosquatting to trick hundreds of users into downloading a malicious NPM package that delivers the r77 rootkit.
The post Hundreds Download Malicious NPM Package Capable of Delivering Rootkit appeared first on SecurityWeek.
Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down.
The post Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day appeared first on SecurityWeek.
Atlassian confirms that “a handful of customers” were hit by exploits targeting a remotely exploitable flaw in its Confluence Data Center and Server products.
The post Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day appeared first on Sec…
Atlassian confirms that “a handful of customers” were hit by exploits targeting a remotely exploitable flaw in its Confluence Data Center and Server products.
The post Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day appeared first on Sec…
Fortinet warns of multiple malicious NPM packages that include install scripts designed to steal sensitive information.
The post Dozens of Malicious NPM Packages Steal User, System Data appeared first on SecurityWeek.
The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies.
The post Chinese Gov Hackers Caught …
UAE-linked APT group Stealth Falcon has used the new Deadglyph backdoor in an attack targeting a governmental entity in the Middle East.
The post UAE-Linked APT Targets Middle East Government With New ‘Deadglyph’ Backdoor appeared first on …