-
September 30th: Cross-platform Chaos malware +++ Patch of the week
Cross-platform Chaos malware A new Botnet is taking hold of Windows and Linux devices alike, using them to start DDoS (Distributed Denial of Service) attacks. Chaos, a Go-based malware, can infect various architectures like x86, AMD64, ARMv5 and many more. With such a wide spectrum, it does not just target high value devices, it also […]
-
September 2nd: GO#WEBBFUSCATOR +++ Patches of the week
GO#WEBBFUSCATOR Threat analysts form Securonix have spotted a new malware campaign dubbed GO#WEBBFUSCATOR which relies on phishing e-mails, malicious documents and most curiously on an image of the James Webb telescope. The malware is written in Golang, a programing language which is becoming increasingly popularfor cybercrime thanks to its cross-platform and its resistance to reverse […]
-
August 19th: Apple security updates +++ Google Chrome zero-day +++ BugDrop malware
Apple security updates to patch new zero-day vulnerabilites Apple released on Wednesday security updates for iOS, iPadOS, and macOS platforms to remediate two zero-day vulnerabilities previously exploited by threat actors to compromise its devices: CVE-2022-32893 – An out-of-bounds issue in WebKit which could lead to the execution of arbitrary code by processing a specially crafted web […]
-
August 12th: Processors contain vulnerabilities +++ Open Cybersecurity Schema Framework +++ Vulnerabilities and updates of the week
After Spectre and Meltdown, it is now Æpicleak’s and SQUIP’s turn Processors from AMD and Intel contain vulnerabilities that attackers can use to leak data. They were found by researchers of Sapienza University of Rome, the Graz University of Technology, the CISPA Helmholtz Center for Information Security, and Amazon Web Services. The first vulnerability – […]
-
August 8th: Nozomi Networks OT/IoT Security Report +++ Data exfiltration via bookmark syncing +++ Malware campaign in GitHub repos +++ Patch priority index July 2022
Nozomi Networks OT/IoT Security Report Nozomi Networks has released their semi-annual OT/IoT Security Report, covering the threat and vulnerability landscape for the first half of 2022. In this report, they break down the threat landscape, including: A review of the current state of OT/IoT cybersecurity Trends in the threat landscape (plus timeline), and solutions for […]
-
6th May: Old Enemies hiding in New Places: Fileless Malware +++ Happy Patch-Day, Android!
Old Enemies hiding in New Places: Fileless Malware Attackers have found a creative new way of challenging cyber safety on a daily basis – using event logs to hide fileless malware. Kaspersky researchers published a report on the new malware campaign last Wednesday. Let’s take a closer look: The unusual thing about the campaign was […]