27 May GitHub: Attackers stole login details of 100K npm user accounts GitHub revealed today that an attacker stole the login details of roughly 100,000 npm accounts during a mid-April security breach with the help of stolen OAuth app tokens issued to Heroku and Travis-CI. […]
27 May Microsoft finds severe bugs in Android apps from large mobile providers Microsoft security researchers have found high severity vulnerabilities in a framework used by Android apps from multiple large international mobile service providers. […]
27 May Microsoft to force better security defaults for all Azure AD tenants Microsoft has announced that it will force enable stricter secure default settings known as ‘security defaults’ on all existing Azure Active Directory (Azure AD) tenants starting in late June 2022. […]
27 May BlackCat/ALPHV ransomware asks $5 million to unlock Austrian state Austrian federal state Carinthia has been hit by the BlackCat ransomware gang, also known as ALPHV, who demanded a $5 million to unlock the encrypted computer systems. […]
26 May Intuit warns of QuickBooks phishing threatening to suspend accounts Tax software vendor Intuit has warned that QuickBooks customers are being targeted in an ongoing series of phishing attacks impersonating the company and trying to lure them with fake account suspension warnings. […]
26 May Windows 11 KB5014019 breaks Trend Micro ransomware protection This week’s Windows optional cumulative update previews have introduced a compatibility issue with some of Trend Micro’s security products that breaks some of their capabilities, including the ransomware protection feature. […]
26 May OAS platform vulnerable to critical RCE and API access flaws Threat analysts have disclosed vulnerabilities affecting the Open Automation Software (OAS) platform, leading to device access, denial of service, and remote code execution. […]
26 May Exploit released for critical VMware auth bypass bug, patch now Proof-of-concept exploit code is now available online for a critical authentication bypass vulnerability in multiple VMware products that allows attackers to gain admin privileges. […]
25 May New ‘Cheers’ Linux ransomware targets VMware ESXi servers A new ransomware named ‘Cheers’ has appeared in the cybercrime space and has started its operations by targeting vulnerable VMware ESXi servers. […]
25 May New ChromeLoader malware surge threatens browsers worldwide The ChromeLoader malware is seeing an uptick in detections this month, following a relatively stable operation volume since the start of the year, which means that the malvertiser is now becoming a widespread threat. […]