Security News | HKCERT

MGM Resorts ESXi servers allegedly encrypted in ransomware attack

An affiliate of the BlackCat ransomware group, also known as APLHV, is behind the attack that disrupted MGM Resorts’ operations, forcing the company to shut down IT systems.

Bleeping Computer 15 Sep 2023 4287 Views

Windows 11 ‘ThemeBleed’ RCE bug gets proof-of-concept exploit

Proof-of-concept exploit code has been published for a Windows Themes vulnerability tracked as CVE-2023-38146 that allows remote attackers to execute code.

Bleeping Computer 15 Sep 2023 504 Views

When LockBit Ransomware Fails, Attackers Deploy Brand-New '3AM'

Nothing good happens after 2 a.m., they say, especially when hackers have two kinds of ransomware at their disposal.

Dark Reading 14 Sep 2023 509 Views

Check Point Research reports a large-scale phishing attack targeting over 40 Colombian based companies

Over the past two months, Check Point researchers have come across a novel large-scale phishing campaign that specifically targeted over 40 prominent companies spanning various industries in Colombia. The primary objective of the attackers was to surreptitiously implant the infamous “Remcos” malware onto victims...

Check Point 13 Sep 2023 100 Views

Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper

A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and RedLine Clipper, to gather a wide range of information from compromised Windows machines.

Cyware News 13 Sep 2023 486 Views

Google fixes another Chrome zero-day bug exploited in attacks

Google released emergency security updates to fix the fourth Chrome zero-day vulnerability exploited in attacks since the start of the year. [...]

Bleepingcomputer 12 Sep 2023 562 Views

Microsoft will block 3rd-party printer drivers in Windows Update

Microsoft will block third-party printer driver delivery in Windows Update as part of a substantial and gradual shift in its printer driver strategy over the next 4 years. [...]

Bleepingcomputer 12 Sep 2023 599 Views

Unearthed touchscreen iMac G3 prototype evokes a very different era of Apple

25 years ago, Apple was cool with firms hacking up kiosk-friendly touch iMacs.

Ars Technica 12 Sep 2023 4677 Views

Apple zero-click iMessage exploit used to infect iPhones with spyware

Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain to deploy NSO Group's Pegasus commercial spyware onto fully patched iPhones. [...]

Bleepingcomputer 8 Sep 2023 481 Views

Google is enabling Chrome real-time phishing protection for everyone

Google announced today that it is deprecating the standard Google Chrome Safe Browsing feature and moving everyone to its Enhanced Safe Browsing feature in the coming weeks, bringing real-time phishing protection to all users while browsing the web. [...]

Bleepingcomputer 8 Sep 2023 478 Views