05 May New Android FluHorse malware steals your passwords, 2FA codes A new Android malware called ‘FluHorse’ has been discovered, targeting users in Eastern Asia with malicious apps that imitate legitimate versions. […]
05 May New Android updates fix kernel bug exploited in spyware attacks Android security updates released this month patch a high-severity vulnerability exploited as a zero-day to install commercial spyware on compromised devices. […]
05 May ALPHV gang claims ransomware attack on Constellation Software Canadian diversified software company Constellation Software confirmed on Thursday that some of its systems were breached by threat actors who also stole personal information and business data. […]
05 May WordPress custom field plugin bug exposes over 1M sites to XSS attacks Security researchers warn that the ‘Advanced Custom Fields’ and ‘Advanced Custom Fields Pro’ WordPress plugins, with millions of installs, are vulnerable to cross-site scripting attacks (XSS). […]
04 May Kimsuky hackers use new recon tool to find security gaps The North Korean Kimsuky hacking group has been observed employing a new version of its reconnaissance malware, now called ‘ReconShark,’ in a cyberespionage campaign with a global reach. […]
04 May Get 50% off Malwarebytes Premium + Privacy in this limited-time deal If you are concerned about the security and privacy of your online activities, this new 50% off Malwarebytes deal can bring you peace of mind. […]
04 May New Fleckpe Android malware installed 600K times on Google Play A new Android subscription malware named ‘Fleckpe’ has been spotted on Google Play, the official Android app store, disguised as legitimate apps downloaded over 620,000 times. […]
04 May Microsoft testing improved Explorer details pane, Windows Spotlight Microsoft has released a new Windows 11 dev build that modernizes the File Explorer details pane, improves the Windows Spotlight lock screen feature, and expands the roll out of “notification badging” in the Start menu. […]
04 May Cisco phone adapters vulnerable to RCE attacks, no fix available Cisco has disclosed a vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters, allowing an unauthenticated, remote attacker to execute arbitrary code on the devices. […]
04 May Ransomware gang hijacks university alert system to issue threats The Avos ransomware gang hijacked Bluefield University’s emergency broadcast system, “RamAlert,” to send students and staff SMS texts and email alerts that their data was stolen and would soon be released. […]