Security News
Google Chrome emergency update fixes 6th zero-day exploited in 2023
Google has fixed the sixth Chrome zero-day vulnerability this year in an emergency security update released today to counter ongoing exploitation in attacks. [...]
Bleepingcomputer
29 Nov 2023 1876 Views
Google Drive users say Google lost their files; Google is investigating
Google tells users to not delete local Drive profile data while it investigates.
Ars Technica
29 Nov 2023 3646 Views
GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ
The attacker initiates a connection to ActiveMQ through the OpenWire protocol, typically on port 61616. By transmitting a crafted packet, the attacker triggers the system to unmarshal a class under their control.
Cyware News
29 Nov 2023 1575 Views
New Rust-based SysJoker backdoor linked to Hamas hackers
A new version of the multi-platform malware known as 'SysJoker' has been spotted, featuring a complete code rewrite in the Rust programming language.
Bleeping Computer
28 Nov 2023 1609 Views
U.S., U.K., and Global Partners Release Secure AI System Development Guidelines
The U.K. and U.S., along with international partners from 16 other countries, have released new guidelines for the development of secure artificial intelligence (AI) systems.
The Hacker News
28 Nov 2023 1662 Views
Atomic Stealer malware strikes macOS via fake browser updates
The 'ClearFake' fake browser update campaign has expanded to macOS, targeting Apple computers with Atomic Stealer (AMOS) malware. [...]
Bleepingcomputer
25 Nov 2023 1576 Views
Critical bug in ownCloud file sharing app exposes admin passwords
Open source file sharing software ownCloud is warning of three critical-severity security vulnerabilities, including one that can expose administrator passwords and mail server credentials. [...]
Bleepingcomputer
25 Nov 2023 1666 Views
Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails
Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab. "The malware itself is split into multiple components, including a loader, injector, downloader and backdoor, and successful requests to C2-controlled servers are...
The Hacker News
23 Nov 2023 1558 Views
How to give Windows Hello the finger and login as a user on their stolen laptop
Not that we're encouraging anyone to defeat this fingerprint authentication
Hardware security hackers have detailed how it's possible to bypass Windows Hello's fingerprint authentication and login as someone else – if you can steal or be left alone with a vulnerable device....
The Register
23 Nov 2023 3276 Views
Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks
A new phishing attack has been observed leveraging a Russian-language Microsoft Word document to deliver malware capable of harvesting sensitive information from compromised Windows hosts. The activity has been attributed to a threat actor called Konni, which is assessed to share overlaps with a North Korean...
The Hacker News
23 Nov 2023 1443 Views
