A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tipping off endpoint detection and response (EDR) solutions.… Read More »New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools
Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the threat actors are continuing… Read More »ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms
Cybersecurity researchers have flagged a “critical” security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim’s… Read More »Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts
A suspected China-based threat actor has been linked to a series of cyber attacks targeting high-profile organizations in Southeast Asia since at least October 2023. The espionage campaign targeted organizations… Read More »Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia
In today’s highly distributed workplace, every employee has the ability to act as their own CIO, adopting new cloud and SaaS technologies whenever and wherever they need. While this has… Read More »What is Nudge Security and How Does it Work?
Cybersecurity researchers have discovered a novel surveillance program that’s suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from… Read More »Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017
Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said has been exploited… Read More »Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability
The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng (aka gbigmao and gxiaomao), who… Read More »U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls
Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application (CSA) and Connect Secure products that could lead to privilege escalation and code execution. The… Read More »Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities
Users of Cleo-managed file transfer software are being urged to ensure that their instances are not exposed to the internet following reports of mass exploitation of a vulnerability affecting fully… Read More »Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged