Security News
New SVCReady malware loads from Word doc properties
A previously unknown malware loader named SVCReady has been discovered in phishing attacks, featuring an unusual way of loading the malware from Word documents onto compromised machines. [...]
Bleepingcomputer
8 Jun 2022 1706 Views
New ‘DogWalk’ Windows zero-day bug gets free unofficial patches
Free unofficial patches for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT) have been released today through the 0patch platform. [...]
Bleepingcomputer
8 Jun 2022 1705 Views
Mandiant: “No evidence” we were hacked by LockBit ransomware
American cybersecurity firm Mandiant is investigating LockBit ransomware gang's claims that they hacked the company's network and stole data. [...]
Bleepingcomputer
7 Jun 2022 1816 Views
Microsoft's new 'autopatch' service for Windows PC just took another step forwards
Microsoft has rolled out the public preview of Windows Autopatch, potentially a much easier way for admins to handle Patch Tuesday. [...]
ZDNet
7 Jun 2022 1505 Views
Exploit released for Atlassian Confluence RCE bug, patch now
Proof-of-concept exploits for the actively exploited critical CVE-2022-26134 vulnerability impacting Atlassian Confluence and Data Center servers have been widely released this weekend. [...]
Bleepingcomputer
6 Jun 2022 1692 Views
Evasive phishing mixes reverse tunnels and URL shortening services
Security researchers are seeing an uptick in the use of reverse tunnel services along with URL shorteners for large-scale phishing campaigns, making the malicious activity more difficult to stop. [...]
Bleepingcomputer
5 Jun 2022 1644 Views
FluBot Android Spyware Taken Down in Global Law Enforcement Operation
An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot.
The Hacker News
2 Jun 2022 802 Views
Hundreds of Elasticsearch databases targeted in ransom attacks
Hackers have targeted poorly secured Elasticsearch databases and replaced 450 indexes with ransom notes asking for $620 to restore contents, amounting to a total demand of $279,000.
Bleeping Computer
2 Jun 2022 1007 Views
New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email
A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
The Hacker News
2 Jun 2022 695 Views
New Windows Search zero-day added to Microsoft protocol nightmare
A new Windows Search zero-day vulnerability can be used to automatically open a search window containing remotely-hosted malware executables simply by launching a Word document.
Bleeping Computer
2 Jun 2022 888 Views
