January 2021 - Page 3 of 14

Linux malware uses open-source tool to evade detection

AT&T Alien Labs security researchers have discovered that the TeamTNT cybercrime group upgraded their Linux crypto-mining with open-source detection evasion capabilities. […]

27 Jan

Emotet botnet disrupted after global takedown operation

The infrastructure of today’s most dangerous botnet built by cybercriminals using the Emotet malware was taken down following an international coordinated action coordinated by Europol and Eurojust. […]

27 Jan

Here’s how a researcher broke into Microsoft VS Code’s GitHub

This month a researcher was awarded a bug bounty award of an undisclosed amount after he broke into the official GitHub repository of Microsoft Visual Studio Code. A vulnerability in VS Code’s issue management function and a lack of authentication checks enabled the researcher to obtain push access, and write to the repository. […]

26 Jan

Microsoft releases new Windows 10 Intel CPU microcode updates

Microsoft has released a new set of Intel microcode updates for Windows 10 20H2, 2004, 1909, and older versions to fix bugs impacting multiple Intel CPU families. […]

26 Jan

New Linux SUDO flaw lets local users gain root privileges

A now-fixed Sudo vulnerability allowed any local user to gain root privileges on Unix-like operating systems without requiring authentication. […]

26 Jan

Pan-Asian retail giant Dairy Farm suffers REvil ransomware attack

Massive pan-Asian retail chain operator Dairy Farm Group was attacked this month by the REvil ransomware operation, demanding a $30 million ransom. […]

26 Jan

Google fixes severe Golang Windows RCE vulnerability

This month Google engineers have fixed two vulnerabilities in the Go language (Golang), including a severe RCE flaw, and a cryptographic weakness. The RCE vulnerability tracked as CVE-2021-3115 mainly impacts Windows users of Go running the ‘go get’ command, due to the default behavior of Windows PATH lookups. […]

26 Jan

Month: January 2021

Linux malware uses open-source tool to evade detection

Emotet botnet disrupted after global takedown operation

Here’s how a researcher broke into Microsoft VS Code’s GitHub

Microsoft releases new Windows 10 Intel CPU microcode updates

New Linux SUDO flaw lets local users gain root privileges

Pan-Asian retail giant Dairy Farm suffers REvil ransomware attack

Google fixes severe Golang Windows RCE vulnerability

TikTok fixes flaws allowing theft of private user information

North Korean hackers are targeting security researchers with malware, 0-days

Beware of this active UK NHS COVID-19 vaccination phishing attack