19 Jun ASUS urges customers to patch critical router vulnerabilities ASUS has released new firmware with cumulative security updates that address vulnerabilities in multiple router models, warning customers to immediately update their devices or restrict WAN access until they’re secured. […]
19 Jun Hackers use fake OnlyFans pics to drop info-stealing malware A malware campaign is using fake OnlyFans content and adult lures to install a remote access trojan known as ‘DcRAT,’ allowing threat actors to steal data and credentials or deploy ransomware on the infected device. […]
19 Jun Android spyware camouflaged as VPN, chat apps on Google Play Three Android apps on Google Play were used by state-sponsored threat actors to collect intelligence from targeted devices, such as location data and contact lists. […]
18 Jun Reddit hackers threaten to leak data stolen in February breach The BlackCat (ALPHV) ransomware gang is behind a February cyberattack on Reddit, where the threat actors claim to have stolen 80GB of data from the company. […]
18 Jun New Mystic Stealer malware increasingly used in attacks A new information-stealing malware named ‘Mystic Stealer,’ has been promoted on hacking forums and darknet markets since April 2023, quickly gaining traction in the cybercrime community. […]
18 Jun Microsoft confirms Azure, Outlook outages caused by DDoS attacks Microsoft has confirmed that recent outages to Azure, Outlook, and OneDrive web portals resulted from Layer 7 DDoS attacks against the company’s services. […]
17 Jun US govt offers $10 million bounty for info on Clop ransomware The U.S. State Department’s Rewards for Justice program announced up to a $10 million bounty yesterday for information linking the Clop ransomware attacks to a foreign government. […]
17 Jun Windows 11 ‘Win32 app isolation’ security feature now in preview Microsoft announced the public preview launch of Win32 app isolation, a new Windows 11 security feature specifically designed to sandbox 32-bit desktop applications. […]
17 Jun SMS delivery reports can be used to infer recipient’s location A team of university researchers has devised a new side-channel attack named ‘Freaky Leaky SMS,’ which relies on the timing of SMS delivery reports to deduce a recipient’s location. […]
16 Jun The Week in Ransomware – June 16th 2023 – Wave of Extortion The MOVEit Transfer extortion attacks continue to dominate the news cycle, with the Clop ransomware operation now extorting organizations breached in the attacks. […]