Microsoft spies a new and worrying macOS malware strain
Microsoft warns of new version of the XCSSET infostealer It comes with new obfuscation, infection, and persistence techniques Experts warn all users to be careful Microsoft says it has spotted…
Profit over privacy? Google gives advertisers more personal info in major ‘fingerprinting’ U-turn
Google has reversed its policy on ‘fingerprinting’ ‘Fingerprinting’ is a technique used to collect personal user data Users have very little say over what information is given to advertisers Do…
Amazon EC2 instances under fire from whoAMI attacks potentially giving hackers code execution access
A flaw named WhoAMI was found in Amazon Machine Image It allows threat actors to gain RCE abilities on people’s AWS accounts A fix has been released, but many users…
Palo Alto Networks PAN-OS sees authentication bypass under attack from hackers
Palo Alto Networks fixes authentication bypass PAN-OS flaw A day after the patch was released, criminals started looking for vulnerable endpoints The flaw allows them to run different PHP scripts…
Russian cyberattackers spotted hitting Microsoft Teams with new phishing campaign
Microsoft has spotted a new phishing attack vector in the wild Storm-2372 is stealing access tokens through Microsoft Teams The group has been linked to Russia with medium confidence A…
Worrying YouTube security flaw exposed billions of user emails
A researcher has discovered a worrying YouTube security vulnerability The flaw allowed outsiders to gain access to all YouTube account emails This has since been patched, so users should update…
Hackers use CAPTCHA scam in PDF files on Webflow CDN to get past security systems
Netskope’s researchers uncover new phishing campaign Team says the campaign started in mid-2024 and has affected “thousands” Victims are promised important PDF documents in exchange for credit card data A…
Top component maker Unimicron hit by massive ransomware attack
Unimicron confirms ransomware attack with the Taiwanese Stock Exchange It does not expect significant financial impact Sarcoma took responsibility, claiming they stole sensitive data, as well Unimicron, a global manufacturing…
Not even emoji are safe from hackers – smiley faces can be hijacked to hide data, study claims
Researcher finds a way to add invisible text to emojis It probably can’t be used for malware…probably It could be used for watermarking or bypassing human moderation A security researcher…
Massive online data breach sees 2.7 billion records leaked – here’s what we know
An IoT firm has suffered a major data breach, experts warn The leak exposed a Mars Hydro databse containing almost 2.7 billion records The records were primarily comprised of WiFi…