11 Feb Croatian phone carrier data breach impacts 200,000 clients Croatian phone carrier ‘A1 Hrvatska’ has disclosed a data breach exposing the personal information of 10% of its customers, roughly 200,000 people. […]
11 Feb CISA orders federal agencies to update iPhones until Feb 25th The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new flaw to its catalog of vulnerabilities exploited in the wild, an Apple WebKit remote code execution bug used to target iPhones, iPads, and Macs. […]
11 Feb CISA orders federal agencies to update iPhones, Macs until Feb 25th The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new flaw to its catalog of vulnerabilities exploited in the wild, an Apple WebKit remote code execution bug used to target iPhones, iPads, and Macs. […]
11 Feb Google Project Zero: Vendors are now quicker at fixing zero-days Google’s Project Zero has published a report showing that organizations took less time to address the zero-day vulnerabilities that the team reported last year. […]
11 Feb CISA urges orgs to patch actively exploited Windows SeriousSAM bug The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added to the catalog of vulnerabilities another 15 security issues actively used in cyberattacks. […]
10 Feb Microsoft fixes Defender flaw letting hackers bypass antivirus scans Microsoft has recently addressed a weakness in the Microsoft Defender Antivirus on Windows that allowed attackers to plant and execute malicious payloads without triggering Defender’s malware detection engine. […]
10 Feb Microsoft starts killing off WMIC in Windows, will thwart attacks Microsoft is moving forward with removing the Windows Management Instrumentation Command-line (WMIC) tool, wmic.exe, starting with the latest Windows 11 preview builds in the Dev channel. […]
10 Feb Hacking group ‘ModifiedElephant’ evaded discovery for a decade Threat analysts have linked a decade of activity to an APT (advanced persistent threat) actor called ‘ModifiedElephant’, who has managed to remain elusive to all threat intelligence firms since 2012. […]
10 Feb Apple patches new zero-day exploited to hack iPhones, iPads, Macs Apple has released security updates to fix a new zero-day vulnerability exploited in the wild by attackers to hack iPhones, iPads, and Macs. […]
10 Feb Qbot, Lokibot malware switch back to Windows Regsvr32 delivery Malware distributors have turned to an older trick known as Squiblydoo to spread Qbot and Lokibot via Microsoft Office document using regsvr32.exe. […]