Security News | HKCERT

Ambient light sensors can reveal your device activity. How big a threat is it?

For now, there's no reason for concern, but that could change in coming years.

Ars Technica 24 Jan 2024 758 Views

Chrome can now organize your tab bar for you

A click in Chrome can turn your messy tab layout into carefully organized groups.

Ars Technica 24 Jan 2024 808 Views

iOS 17.3 adds multiple features originally planned for iOS 17

macOS 14.3, watchOS 10.3, and tvOS 17.3 were also released.

Ars Technica 24 Jan 2024 803 Views

Fortra warns of new critical GoAnywhere MFT auth bypass, patch now

Fortra is warning of a new authentication bypass vulnerability impacting GoAnywhere MFT (Managed File Transfer) versions before 7.4.1 that allows an attacker to create a new admin user. [...]

Bleepingcomputer 23 Jan 2024 593 Views

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected machines.

The Hacker News 22 Jan 2024 963 Views

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

The threat actor tracked as TA866 has resurfaced after a nine-month hiatus with a new large-volume phishing campaign to deliver known malware families such as WasabiSeed and Screenshotter.

The Hacker News 22 Jan 2024 991 Views

VMware confirms critical vCenter flaw now exploited in attacks

VMware has confirmed that a critical vCenter Server remote code execution vulnerability patched in October is now under active exploitation.

Bleeping Computer 22 Jan 2024 884 Views

Bigpanzi botnet infects 170,000 Android TV boxes with malware

A previously unknown cybercrime syndicate named 'Bigpanzi' has been making significant money by infecting Android TV and eCos set-top boxes worldwide since at least 2015. [...]

Bleepingcomputer 18 Jan 2024 918 Views

Have I Been Pwned adds 71 million emails from Naz.API stolen account list

Have I Been Pwned has added almost 71 million email addresses associated with stolen accounts in the Naz.API dataset to its data breach notification service. [...]

Bleepingcomputer 18 Jan 2024 1187 Views

Opera MyFlaw Bug Could Let Hackers Run Any File on Your Mac or Windows

The vulnerability was addressed through updates on November 22, 2023, after responsible disclosure, and was related to a long-forgotten version of the My Flow landing page.

Cyware News 16 Jan 2024 826 Views