Category: News

Leaked NSO Group Data Hints at Widespread Pegasus Spyware Infections

The secretive Israeli firm was allegedly storing 50,000+ mobile phone numbers for activists, journalists, business executives and politicians — possible targets of iPhone and Android hacking.

Linux Variant of HelloKitty Ransomware Targets VMware ESXi Servers

HelloKitty joins the growing list of ransomware bigwigs going after the juicy target of VMware ESXi, where one hit gets scads of VMs.

Top CVEs Trending with Cybercriminals

An analysis of criminal forums reveal what publicly known vulnerabilities attackers are most interested in.

The Evolving Role of the CISO

Curtis Simpson, CISO at Armis, discusses the top qualities that all CISOs need to possess to excel.

Critical Juniper Bug Allows DoS, RCE Against Carrier Networks

Telecom providers, including wireless carriers, are at risk of disruption of network service if the bug in SBR Carrier is exploited.

Windows 0-Days Used Against Dissidents in Israeli Broker’s Spyware

Candiru, aka Sourgum, allegedly sells the DevilsTongue surveillance malware to governments around the world.

Microsoft: New Unpatched Bug in Windows Print Spooler           

Another vulnerability separate from PrintNightmare allows for local elevation of privilege and system takeover.

Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases

The popular e-commerce platform for WordPress has started deploying emergency patches.

Fake Zoom App Dropped by New APT ‘LuminousMoth’

First comes spear-phishing, next download of malicious DLLs that spread to removable USBs, dropping Cobalt Strike Beacon, and then, sometimes, a fake Zoom app.

SonicWall Warns Firewall Hardware Bugs Under Attack

SonicWall issued an urgent security alert warning customers that some of its current and legacy firewall appliances were under active attack.