Discover

Based on the findings by cybersecurity firm Positive Technologies. The weakness of the network architecture could lead to cyber attacks like denial of service (DOS) and also disclose subscriber identifiers and profile information, and even use Internet services at a user’s expense without their knowledge

Cybereason has identified a new espionage campaign using three different malware variants which affect dropbox, google doc, Facebook and its C&C servers to target its victims

Microsoft has released fixes for 58 vulnerabilities. Out this 58, 9 are classified as Critical, 47 as Important and 2 as Moderate

California based Cybersecurity giant FireEye hacked and stole their RED TEAM tool that’s is used to test clients security. The attacks were from a nation with top-tier offensive capabilities says FireEye

Security researcher Oskars Vegeris from evolution gaming reported this vulnerability. This zero-click wormable vulnerability could have let hackers execute arbitrary code by sending a specially-crafted chat message and compromise a target’s system

The Chinese smartphone manufacture made over 4.2 million dollars by implanting malware on their phones. Gionee infected 21.75 million phones with trojan horse knowingly. The Chinese court has fined the company 200.00 Yuan in fine and 3 o 3.5 years Imprisonment

OceanLotus aka APT32 group is targeting Vietnamese users with new malware. The malware is capable of collecting information such as processor, memory, serial number, and MAC addresses information from the victim’s devices

British COVID 19 vaccine developer AstraZeneca targeted by North Korean hackers. Hackers tried to break into the systems by posing as recruiters on LinkedIn and WhatsApp and approached employees with fake job offers

Google project zero has disclosed a vulnerability in iOS that allowed a remote attacker to obtain control over the devices without any user interaction. The vulnerability is buffer overflow programming error in C++ code

Researchers at Sansec have discovered a new malware which injects malicious payloads into the sharing icon of social media pages. These icons are of famous websites such as Facebook, Instagram, Twitter, Google, YouTube, and Pinterest

The attackers used a Blackbox device which is physically connected to an ATM to send commands. They have stolen 800000€ from 35 ATMs for 7 months. The Italian carabinieri identified 12 people

vpnMetor’s researchers have discovered a potential credential stuffing operation whose origin is not known. 72-gigabyte database with 380+ million users was hosted on an unsecured Elasticsearch server database contained Personally Identifiable Information (PII) data and Spotify login credentials, email addresses, and countries of residence.

Kaspersky researchers have detected 20 apps on play store which claim to be Minecraft modpacks. The main aim of these apps to deliver advertisements.

Experts warn of an Office 365phishing campaign targeting small scale business in the U.S and Australia. A compromised website is used as a proxy chain. The phishing email sends fake notifications for voice messages and Zoom invitations to trick victims into clicking a link which leads the victim to the phishing page to steal login credentials

“Pumpedkids” a threat actor leaked a list of exploits which could be used to steal VPN credentials from almost 50000 Fortnight devises.

This malware spreads through discord attachments and discord webhooks. This malware steals web browser tokens, Discord webhook tokens, web browser passwords, and system information.