Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3499-1: libapache2-mod-auth-openidc security update
Open Redirect vulnerabilities were found in libapache2-mod-auth-openidc, OpenID Connect Relying Party implementation for Apache, which could lead to informatio…
Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware
Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware calledLokiBoton compromised systems."Lok…
North Korean Hacker Group Andariel Strikes with New EarlyRat Malware
The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in phishing attacks, adding another piece to…
Mageia 2023-0211: python-tornado security update
Remote unauthenticated attacker may redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. (CVE-…
XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks
Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver theXWorm malwareon targeted systems.S…
Researchers Found Zimbra Zero-Day XSS Vulnerability Under Attack
Researchers have found active phishing campaigns exploiting a zero-day vulnerability in the Zimbra email platform.…Researchers Found Zimbra Zero-Day XSS Vulner…
Hackers Exploited 0-Day Vulnerability in Zimbra Email Platform to Spy on Users
A threat actor, likely Chinese in origin, is actively attempting to exploit a zero-day vulnerability in the Zimbra open-source email platform as part of spear-…
New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code exec…
Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency
Threat actors are exploiting improperly-secured Google Cloud Platform (GCP) instances to download cryptocurrency mining software to the compromised systems as …
How To Make Email Safe for Busine
In this interview with Help Net Security, Dave Wreski, CEO at Guardian Digital , the open source email security company, talks about modern email threats and o…
New Study Warns of Security Threats Linked to Recycled Phone Numbers
A new academic study has highlighted a number of privacy and security pitfalls associated with recycling mobile phone numbers that could be abused to stage a v…
A Google Drive 'Feature' Could Let Attackers Trick You Into Installing Malware
An unpatched security weakness in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or image…
Evasive Credit Card Skimmers Using Homograph Domains and Infected Favicon
Cybersecurity researchers today highlighted an evasive phishing technique that attackers are exploiting in the wild to target visitors of several sites with a …
Many Users Hacked Via Fake Google Chrome Update From Compromised WordPress Websites
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
Scam Alert: You've Been Selected for 'Like of the Year 2020' Cash Prizes
Cybersecurity researchers have discovered a large-scale ongoing fraud scheme that lures unsuspecting Russian Internet users with promises of financial rewards …
Scammers Exploit Google Alerts To Trick Users
We already have witnessed the innovativeness of criminal hackers in exploiting various services to bait users. From regular email phishingScammers Exploit Goog…