New Android Espionage Campaign Spotted in India and Pakistan

[ad_1] Researchers from cybersecurity firm ESET found that a recent cyber espionage campaign using the open-source malware XploitSPY targeted Android users in India and Pakistan. The campaign, which ESET named ‘eXotic Visit,’ was active between November 2021 and the end of 2023. ESET researchers observed around 380 victims of the campaign. Although they were unable …

New Android Espionage Campaign Spotted in India and Pakistan Read More »

CISA adds D-Link multiple NAS devices bugs to its Known Exploited Vulnerabilities catalog

[ad_1] CISA adds D-Link multiple NAS devices bugs to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 11, 2024 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds D-Link multiple NAS devices bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following D-Link multiple NAS devices flaws to its …

CISA adds D-Link multiple NAS devices bugs to its Known Exploited Vulnerabilities catalog Read More »

Data Breach Exposes 300k Taxi Passengers’ Information

[ad_1] Cybersecurity researchers have uncovered a significant data exposure concerning nearly 300,000 taxi passengers in the UK and Ireland.  Jeremiah Fowler, in collaboration with vpnMentor, found a non-password-protected database containing personal details such as names, phone numbers and email addresses. These records, belonging to Dublin-based iCabbi, a dispatch and fleet management technology provider, were left …

Data Breach Exposes 300k Taxi Passengers’ Information Read More »

Palo Alto Networks fixed multiple DoS bugs in its firewalls

[ad_1] Palo Alto Networks fixed multiple DoS bugs in its firewalls Pierluigi Paganini April 11, 2024 Palo Alto Networks fixed several vulnerabilities in its PAN-OS operating system, including 3 issues that can trigger a DoS condition on its firewalls. Palo Alto Networks released security updates to address several high-severity vulnerabilities in its PAN-OS operating system. …

Palo Alto Networks fixed multiple DoS bugs in its firewalls Read More »

Apple Boosts Spyware Alerts For Mercenary Attacks

[ad_1] Apple has updated its documentation related to its warning system for mercenary spyware threats, now specifying that it alerts users when they may have been individually targeted by such attacks. The revision points out companies like NSO Group, known for developing surveillance tools like Pegasus, which state actors often use for targeted attacks on …

Apple Boosts Spyware Alerts For Mercenary Attacks Read More »

Apple warns of mercenary spyware attacks on iPhone users in 92 countries

[ad_1] Apple warns of mercenary spyware attacks on iPhone users in 92 countries Pierluigi Paganini April 11, 2024 Apple is warning iPhone users in over 90 countries of targeted mercenary spyware attacks, Reuters agency reported. Apple is alerting iPhone users in 92 countries about mercenary spyware attacks, reported Reuters. Reuters only mentioned India as one …

Apple warns of mercenary spyware attacks on iPhone users in 92 countries Read More »

Threat Actors Game GitHub Search to Spread Malware

[ad_1] Threat actors are going to great lengths to ensure that malicious code hidden in legitimate-looking GitHub repositories is used by as many developers as possible, Checkmarx has warned. The security vendor’s research engineer, Yehuda Gelb, described a number of techniques deployed in a recent campaign designed to ensure these repositories appear at the top …

Threat Actors Game GitHub Search to Spread Malware Read More »

Fortinet fixed a critical RCE bug in FortiClientLinux

[ad_1] Fortinet fixed a critical remote code execution bug in FortiClientLinux Pierluigi Paganini April 10, 2024 Fortinet addressed multiple issues in FortiOS and other products, including a critical remote code execution flaw in FortiClientLinux. Fortinet fixed a dozen vulnerabilities in multiple products, including a critical-severity remote code execution (RCE) issue, tracked as CVE-2023-45590 (CVSS score …

Fortinet fixed a critical RCE bug in FortiClientLinux Read More »

Windows: New ‘BatBadBut’ Rust Vulnerability Given Highest CVSS Score

[ad_1] A critical vulnerability in the Rust standard library could be exploited to target Windows systems and perform command injection attacks. The flaw was discovered by a security engineer from Flatt Security known as RyotaK. They named it BatBadBut, reported it to the CERT Coordination Center (CERT/CC) and published an analysis on April 9, 2024. …

Windows: New ‘BatBadBut’ Rust Vulnerability Given Highest CVSS Score Read More »

Group Health Cooperative data breach impacted 530K individuals

[ad_1] Group Health Cooperative data breach impacted 530,000 individuals Pierluigi Paganini April 10, 2024 Group Health Cooperative of South Central Wisconsin disclosed a data breach that impacted over 500,000 individuals. The Group Health Cooperative of South Central Wisconsin (GHC-SCW) is a non-profit organization that provides health insurance and medical care services to its members in …

Group Health Cooperative data breach impacted 530K individuals Read More »

Scroll to Top