30 Mar New Spring Java framework zero-day allows remote code execution A new zero-day vulnerability in the Spring Core Java framework called ‘Spring4Shell’ has been publicly disclosed, allowing unauthenticated remote code execution on applications. […]
30 Mar Globant confirms hack after Lapsus$ leaks 70GB of stolen data IT and software consultancy firm Globant has confirmed that they were breached by the Lapsus$ data extortion group, where data consisting of administrator credentials and source code was leaked by the threat actors. […]
30 Mar Google: Russian phishing attacks target NATO, European military The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia’s war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. […]
30 Mar QNAP warns severe OpenSSL bug affects most of its NAS devices Taiwan-based network-attached storage (NAS) maker QNAP warned on Tuesday that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago. […]
29 Mar Google Chrome 100 released with new features, icon, and more Google has released Chrome 100 today, March 29th, 2022, to the Stable desktop channel, and it includes a new logo, security improvements, development features, and more. […]
29 Mar Mars Stealer malware pushed via OpenOffice ads on Google A newly launched information-stealing malware variant called Mars Stealer is rising in popularity, and threat analysts are now spotting the first notable large-scale campaigns employing it. […]
29 Mar $620 million in crypto stolen from Axie Infinity’s Ronin bridge A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity’s Ronin network bridge, making it possibly the largest crypto hack in history. […]
29 Mar Shutterfly discloses data breach after Conti ransomware attack Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack. […]
29 Mar FTC sues Intuit for misleading TurboTax ‘free tax filing’ ads Today, the US Federal Trade Commission (FTC) sued Intuit, the maker of tax preparation software TurboTax, over deceptive advertising campaigns pitching free tax filing products that millions couldn’t use. […]
28 Mar Windows 11 KB5011563 update fixes SMB, DirectX blue screens Microsoft has released the optional KB5011563 cumulative update preview for Windows 11, with fixes for stop errors triggering blue screens of death (BSOD) and other issues. […]