相關新聞 | HKCERT

Ambient light sensors can reveal your device activity. How big a threat is it?

For now, there's no reason for concern, but that could change in coming years.

Ars Technica 2024年01月24日 313 觀看次數

Chrome can now organize your tab bar for you

A click in Chrome can turn your messy tab layout into carefully organized groups.

Ars Technica 2024年01月24日 311 觀看次數

iOS 17.3 adds multiple features originally planned for iOS 17

macOS 14.3, watchOS 10.3, and tvOS 17.3 were also released.

Ars Technica 2024年01月24日 303 觀看次數

Fortra warns of new critical GoAnywhere MFT auth bypass, patch now

Fortra is warning of a new authentication bypass vulnerability impacting GoAnywhere MFT (Managed File Transfer) versions before 7.4.1 that allows an attacker to create a new admin user. [...]

Bleepingcomputer 2024年01月23日 402 觀看次數

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected machines.

The Hacker News 2024年01月22日 642 觀看次數

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

The threat actor tracked as TA866 has resurfaced after a nine-month hiatus with a new large-volume phishing campaign to deliver known malware families such as WasabiSeed and Screenshotter.

The Hacker News 2024年01月22日 636 觀看次數

VMware confirms critical vCenter flaw now exploited in attacks

VMware has confirmed that a critical vCenter Server remote code execution vulnerability patched in October is now under active exploitation.

Bleeping Computer 2024年01月22日 478 觀看次數

Bigpanzi botnet infects 170,000 Android TV boxes with malware

A previously unknown cybercrime syndicate named 'Bigpanzi' has been making significant money by infecting Android TV and eCos set-top boxes worldwide since at least 2015. [...]

Bleepingcomputer 2024年01月18日 446 觀看次數

Have I Been Pwned adds 71 million emails from Naz.API stolen account list

Have I Been Pwned has added almost 71 million email addresses associated with stolen accounts in the Naz.API dataset to its data breach notification service. [...]

Bleepingcomputer 2024年01月18日 532 觀看次數

Opera MyFlaw Bug Could Let Hackers Run Any File on Your Mac or Windows

The vulnerability was addressed through updates on November 22, 2023, after responsible disclosure, and was related to a long-forgotten version of the My Flow landing page.

Cyware News 2024年01月16日 591 觀看次數