07 Sep Apple zero-click iMessage exploit used to infect iPhones with spyware Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain to deploy NSO Group’s Pegasus commercial spyware onto fully patched iPhones. […]
07 Sep Cisco BroadWorks impacted by critical authentication bypass flaw A critical vulnerability impacting the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow remote attackers to forge credentials and bypass authentication. […]
06 Sep Rockstar Games reportedly sold games with Razor 1911 cracks on Steam In an ironic twist, Rockstar Games reportedly uses pirated software cracks to remove its DRM from some games they sell on Steam. […]
06 Sep University of Michigan requires password resets after cyberattack The University of Michigan (UMICH) warned staff and students on Tuesday that they’re required to reset their account passwords after a recent cyberattack. […]
06 Sep Flipper Zero can be used to launch iOS Bluetooth spam attacks The Flipper Zero portable wireless pen-testing and hacking tool can be used to aggressively spam Bluetooth connection messages at Apple iOS devices, such as iPhones and iPads. […]
06 Sep Hackers stole Microsoft signing key from Windows crash dump Microsoft says Storm-0558 Chinese hackers stole a signing key used to breach government email accounts from a Windows crash dump after compromising a Microsoft engineer’s corporate account. […]
06 Sep MSI BIOS updates fix Windows unsupported processor BSOD bug MSI has released BIOS updates to fix a known issue that triggers blue screens of death on Windows computers after installing August 2023 preview updates. […]
05 Sep Coffee Meets Bagel says recent outage caused by destructive cyberattack The Coffee Meets Bagel dating platform confirms last week’s outage was caused by hackers breaching the company’s systems and deleting company data. […]
05 Sep Atlas VPN zero-day vulnerability leaks users’ real IP address An Atlas VPN zero-day vulnerability affecting the Linux client leaks a user’s real IP address simply by visiting a website. […]
05 Sep Crypto casino Stake.com loses $41 million to hot wallet hackers Online cryptocurrency casino Stake.com announced that its ETH/BSC hot wallets had been compromised to perform unauthorized transactions, with over $40 million in crypto reportedly stolen. […]