27 Apr New Atomic macOS info-stealing malware targets 50 crypto wallets A new macOS information-stealing malware named ‘Atomic’ (aka ‘AMOS’) is being sold to cybercriminals via private Telegram channels for a subscription of $1,000 per month. […]
26 Apr Tencent QQ users hacked in mysterious malware attack, says ESET The Chinese APT hacking group known as ‘Evasive Panda’ are behind a mysterious attack that distributed the MsgBot malware as part of an automatic update for the Tencent QQ messaging app. […]
26 Apr Google disrupts the CryptBot info-stealing malware operation Google is taking down malware infrastructure linked to the Cryptbot info stealer after suing those using it to infect Google Chrome users and steal their data. […]
26 Apr Thousands of Apache Superset servers exposed to RCE attacks Apache Superset is vulnerable to authentication bypass and remote code execution at default configurations, allowing attackers to potentially access and modify data, harvest credentials, and execute commands. […]
26 Apr Microsoft rolls out Phone Link for iOS to all Windows 11 users Microsoft is rolling out Phone Link for iOS to all Windows 11 and iPhone users, with the rollout expected to complete by mid-May. […]
26 Apr Microsoft removes LSA Protection from Windows settings to fix bug Microsoft has fixed a known issue triggering Windows Security warnings that Local Security Authority (LSA) Protection is off by removing the feature’s UI from settings. […]
25 Apr VMware fixes critical zero-day exploit chain used at Pwn2Own VMware has released security updates to address zero-day vulnerabilities that could be chained to gain code execution systems running unpatched versions of the company’s Workstation and Fusion software hypervisors. […]
25 Apr Windows 10 KB5025297 preview update released with 10 fixes Microsoft has released the optional KB5025297 Preview cumulative update for Windows 10 22H2, with eighteen fixes or changes. […]
25 Apr Windows 11 KB5025305 adds prioritized Windows updates setting Microsoft has released the optional April 2023 non-security cumulative updates for all editions of Windows 11 22H2 with a new option to prioritize non-security and feature Windows updates. […]
25 Apr New SLP bug can lead to massive 2,200x DDoS amplification attacks A new reflective Denial-of-Service (DoS) amplification vulnerability in the Service Location Protocol (SLP) allows threat actors to launch massive denial-of-service attacks with 2,200X amplification. […]