Security News
Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware
A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a new PowerShell-based information stealer designed to harvest extensive details from infected machines.
"[T]he stealer is a...
The Hacker News
25 Nov 2021 1304 Views
FBI And CISA Issue Holiday Ransomware, Cyberattack Warning
Packet Storm
24 Nov 2021 18663 Views
Suspect Arrested In Ransom Your Employer Scheme
Packet Storm
24 Nov 2021 17904 Views
Attackers Hijack Email Threads Using ProxyLogon/ProxyShell Flaws
Exploiting Microsoft Exchange ProxyLogon & ProxyShell vulnerabilities, attackers are malspamming replies in existing threads and slipping past malicious-email filters.
ThreatPost
23 Nov 2021 795 Views
GoDaddy hack causes data breach affecting 1.2 million customers
In a data breach notification published today, GoDaddy said that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company's Managed WordPress hosting environment.
BleepingComputer
23 Nov 2021 1360 Views
Experts found 11 malicious Python packages in the PyPI repository
Researchers discovered 11 malicious Python packages in the PyPI repository that can steal Discord access tokens, passwords, and conduct attacks.
Security Affairs
19 Nov 2021 1490 Views
Thousands of Firefox users accidentally commit login cookies on GitHub
Thousands of Firefox cookie databases containing sensitive data are available on request from GitHub repositories, data potentially usable for hijacking authenticated sessions.
The Register
19 Nov 2021 1298 Views
MosesStaff Locks Up Targets, with No Ransom Demand, No Decryption
A politically motivated group is paralyzing Israeli entities with no financial goal – and no intention of handing over decryption keys.
ThreatPost
17 Nov 2021 655 Views
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts
Cybersecurity researchers on Monday took the wraps off a new Android trojan that takes advantage of accessibility features on the devices to siphon credentials from banking and cryptocurrency services in Italy, the U.K., and the U.S.
The Hacker News
17 Nov 2021 1367 Views
Emotet malware is back and rebuilding its botnet via TrickBot
The Emotet malware was considered the most widely spread malware in the past, using spam campaigns and malicious attachments to distribute the malware.
Bleeping Computer
16 Nov 2021 1296 Views
