09 Feb New RustDoor macOS malware impersonates Visual Studio update A new Rust-based macOS malware spreading as a Visual Studio update to provide backdoor access to compromised systems uses infrastructure linked to the infamous ALPHV/BlackCat ransomware gang. […]
09 Feb Americans lost record $10 billion to fraud in 2023, FTC warns The U.S. Federal Trade Commission (FTC) says Americans lost over $10 billion to scammers in 2023, marking a 14% increase in reported losses compared to the previous year. […]
08 Feb New Fortinet RCE flaw in SSL VPN likely exploited in attacks Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks. […]
08 Feb Microsoft fixes Copilot issue blocking Windows 11 upgrades Microsoft has lifted a compatibility hold that blocked upgrades to Windows 11 23H2 after resolving an issue that caused desktop icons to move erratically when using Windows Copilot on multi-monitor systems. […]
08 Feb Hyundai Motor Europe hit by Black Basta ransomware attack Car maker Hyundai Motor Europe suffered a Black Basta ransomware attack, with the threat actors claiming to have stolen three terabytes of corporate data. […]
08 Feb Ivanti: Patch new Connect Secure auth bypass bug immediately Today, Ivanti warned of a new authentication bypass vulnerability impacting Connect Secure, Policy Secure, and ZTA gateways, urging admins to secure their appliances immediately. […]
08 Feb Microsoft unveils new ‘Sudo for Windows’ feature in Windows 11 Microsoft introduced ‘Sudo for Windows’ today, a new Windows 11 feature allowing users to execute commands with elevated privileges from unelevated terminals. […]
07 Feb Fortinet warns of new FortiSIEM RCE bugs in confusing disclosure Fortinet is warning of two new unpatched patch bypasses for a critical remote code execution vulnerability in FortiSIEM, Fortinet’s SIEM solution. […]
07 Feb Facebook ads push new Ov3r_Stealer password-stealing malware A new password-stealing malware named Ov3r_Stealer is spreading through fake job advertisements on Facebook, aiming to steal account credentials and cryptocurrency. […]
07 Feb Denmark orders schools to stop sending student data to Google The Danish data protection authority (Datatilsynet) has issued an injunction regarding student data being funneled to Google through the use of Chromebooks and Google Workspace services in the country’s schools. […]