Google has revealed that it will no longer trust digital certificates issued by Chunghwa Telecom and Netlock citing “patterns of concerning behavior observed over the past year.” The changes are… Read More »Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues
Google on Monday released out-of-band fixes to address three security issues in its Chrome browser, including one that it said has come under active exploitation in the wild. The high-severity… Read More »New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
Three security vulnerabilities have been disclosed in preloaded Android applications on smartphones from Ulefone and Krüger&Matz that could enable any app installed on the device to perform a factory reset… Read More »Preinstalled Apps on Ulefone, Krüger&Matz Phones Let Any App Reset Device, Steal PIN
Cybersecurity researchers have discovered a new cryptojacking campaign that’s targeting publicly accessible DevOps web servers such as those associated with Docker, Gitea, and HashiCorp Consul and Nomad to illicitly mine… Read More »Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub
Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, targeted attacks in the wild. The flaws in question, which were responsibly… Read More »Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU
If this had been a security drill, someone would’ve said it went too far. But it wasn’t a drill—it was real. The access? Everything looked normal. The tools? Easy to… Read More »⚡ Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More
The evolution of cyber threats has forced organizations across all industries to rethink their security strategies. As attackers become more sophisticated — leveraging encryption, living-off-the-land techniques, and lateral movement to… Read More »The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats
Cybersecurity researchers have warned of a new spear-phishing campaign that uses a legitimate remote access tool called Netbird to target Chief Financial Officers (CFOs) and financial executives at banks, energy… Read More »Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions
Two information disclosure flaws have been identified in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise Linux, and Fedora, according to the Qualys Threat Research Unit… Read More »New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora
A multinational law enforcement operation has resulted in the takedown of an online cybercrime syndicate that offered services to threat actors to ensure that their malicious software stayed undetected from… Read More »U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation