Security News
Decade-old Linux ‘wall’ bug helps make fake SUDO prompts, steal passwords
A vulnerability in the wall command of the util-linux package that is part of the Linux operating system could allow an unprivileged attacker to steal passwords or change the victim's clipboard.
Bleeping Computer
2 Apr 2024 468 Views
Google now blocks spoofed emails for better phishing protection
Google has started automatically blocking emails sent by bulk senders who don't meet stricter spam thresholds and authenticate their messages as required by new guidelines to strengthen defenses against spam and phishing attacks. [...]
Bleepingcomputer
2 Apr 2024 417 Views
Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware
Malicious ads and bogus websites are acting as a conduit to deliver two different stealer malware, including Atomic Stealer, targeting Apple macOS users.
The Hacker News
2 Apr 2024 7995 Views
Microsoft warns deepfake election subversion is disturbingly easy
Simple stuff like slapping on a logo fools more folks and travels further As hundreds of millions of voters around the globe prepare to elect their leaders this year, there's no question that trolls will try to sway the outcomes using AI, according to Clint Watts...
The Register
2 Apr 2024 3506 Views
New XZ backdoor scanner detects implant in any Linux binary
Firmware security firm Binarly has released a free online scanner to detect Linux executables impacted by the XZ Utils supply chain attack, tracked as CVE-2024-3094. [...]
Bleepingcomputer
2 Apr 2024 364 Views
OWASP Discloses a Data Breach Due to Wiki Misconfiguration
In late February 2024, the Foundation received a few support requests and became aware of a misconfiguration of OWASP’s old Wiki web server. The misconfiguration led to a data breach involving old member resumes.
Cyware News
2 Apr 2024 3515 Views
Red Hat warns of backdoor in XZ tools used by most Linux distros
Today, Red Hat warned users to immediately stop using systems running Fedora development and experimental versions because of a backdoor found in the latest XZ Utils data compression tools and libraries.
Bleeping Computer
2 Apr 2024 432 Views
Shopping platform PandaBuy data leak impacts 1.3 million users
Data belonging to more than 1.3 million customers of the PandaBuy online shopping platform has been leaked, allegedly after two threat actors exploited multiple vulnerabilities to breach systems.
Bleeping Computer
2 Apr 2024 388 Views
Free VPN apps on Google Play turned Android phones into proxies
Over 15 free VPN apps on Google Play were found using a malicious software development kit that turned Android devices into unwitting residential proxies, likely used for cybercrime and shopping bots. [...]
Bleepingcomputer
27 Mar 2024 520 Views
Hackers poison source code from largest Discord bot platform
The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information. [...]
Bleepingcomputer
26 Mar 2024 517 Views
