Category: News

Critical Jira Flaw in Atlassian Could Lead to RCE

The software-engineering platform is urging users to patch the critical flaw ASAP.

Industrial Networks Exposed Through Cloud-Based Operational Tech

Critical ICS vulnerabilities can be exploited through leading cloud-management platforms.

Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day

Update now: The ream of bugs includes some remotely exploitable code execution flaws. Still to come: a fix for what makes iPhones easy prey for Pegasus spyware.

Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug

A privilege elevation bug in Windows 10 opens all systems to attackers to access data and create new accounts on systems.

NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

In another vast software supply-chain attack, the password-stealer is filching credentials from Chrome on Windows systems.

Indictments, Attribution Unlikely to Deter Chinese Hacking, Researchers Say

Researchers are skeptical that much will come from calling out China for the Microsoft Exchange attacks and APT40 activity, but the move marks an important foreign-policy change.

Kubernetes Cloud Clusters Face Cyberattacks via Argo Workflows

Misconfigured permissions for Argo’s web-facing dashboard allow unauthenticated attackers to run code on Kubernetes targets, including cryptomining containers.

French Launch NSO Probe After Macron Believed Spyware Target

Fourteen world leaders were among those found on list of NSO believed targets for its Pegasus spyware.

Tracking Malware and Ransomware Domains in 2021

Ransomware is the threat of 2021. It’s impacting everything from large enterprises, hospitals, to other aspects of our critical infrastructure. Here, we’ll take a look at actual malware domain traffic…
Read more

MacOS Being Picked Apart by $49 XLoader Data Stealer

Cheap, easy & prolific, the new version of the old FormBook form-stealer and keylogger has added Mac users to its hit list, and it’s selling like hotcakes.