04 Oct Actively Exploited Android Zero-Day Impacts Google, Samsung Devices Google’s Threat Analysis Group (TAG) says that a new Android zero-day is actively being exploited in the wild in attacks targeting vulnerable Google Pixel, Huawei, Xiaomi, Samsung, Oppo, and Moto devices. […]
04 Oct Magecart Impacts Hundreds of Thousands of Websites, Still Growing With over two million detections to date, compromising shopping sites’ resources to steal customer payment card info is a global phenomenon unlikely to end soon. […]
04 Oct Novter Trojan Sets its Sights on Microsoft Windows Defender The Novter Trojan, also known as Nodersok or Divergent, is the latest Trojan to actively target Microsoft’s Windows Defender by attempting to disable it. […]
04 Oct Details of 92 Million Brazilians Auctioned on Underground Forums Someone is offering to auction on underground forums a database containing personal information of 92 million Brazilian citizens. They claim that every record is real and unique. […]
03 Oct Microsoft Releases Windows Security Updates to Fix Printing Issue Microsoft today released out of band security updates, cumulative updates, and monthly rollup updates to address a printing issue plaguing all Windows client and server versions acknowledged on September 30. […]
03 Oct Office 365 Admins Can Now Block Malicious Microsoft Query IQY Files Microsoft has silently added new group policies to allow Office 365 admins to block Excel users from opening untrusted Microsoft Query files with IQY, OQY, DQY, and RQY extensions. […]
03 Oct Cyber-Spy Group Active Since 2013 Now Tied to Chinese State Actor Multiple cyber-espionage campaigns that remained unattributed over the years have now been linked to a single threat actor that researchers named PKPLUG, attacking targets across Asia. […]
03 Oct Windows Activator Bundles Banker with C2 in YouTube Description In their effort to hide the command and control (C2) server addresses, operators of a banking trojan placed them in fake websites and in descriptions for YouTube videos. […]
03 Oct Police Seize Bot Farm Behind Potentially Fatal Scam Messages The cyber division of the Ukrainian police took to pieces an operation that made money by registering accounts used to send spam through various services, including email and social networks. […]
02 Oct Zendesk Security Breach May Impact Orgs Like Uber, Slack, and FCC Customer service software company Zendesk is sending users notifications regarding a security incident that might have impacted roughly 10,000 Zendesk Support and Chat accounts activated prior to November 1, 2016. […]