Apple Patches Critical iOS Bugs; One Under Attack

Researchers found that one critical flaw in question is exploitable from the browser, allowing watering-hole attacks. Apple lovers who haven’t yet updated to iOS 15, you may want to pop…

Triada Trojan Conceals Itself in WhatsApp Mod

Security Intelligence – Security Intelligence – Triada Trojan Conceals Itself in WhatsApp Mod A variant of the Triada Trojan concealed itself within a WhatsApp mod for Android devices, Kaspersky found…

CISA warns of trojanized versions of JavaScript library’s NPM package

The warning comes days after three rogue packages, okhsa, klow, and klown discovered by DevSecOps firm Sonatype, were removed from the NPM repository. On Friday, the US Cybersecurity and Infrastructure…

Gigabyte Allegedly Hit by AvosLocker Ransomware

If AvosLocker stole Gigabyte’s master keys, threat actors could force hardware to download fake drivers or BIOS updates in a supply-chain attack a la SolarWinds. The AvosLocker ransomware gang is…

More Generation Zs Are Falling for Online Scams

Security Intelligence – Security Intelligence – More Generation Zs Are Falling for Online Scams It’s sometimes easy to think phishing or vishing scams only work on people who aren’t very…

Microsoft Kills Bug Being Exploited in MysterySnail Espionage Campaign

Microsoft’s October 2021 Patch Tuesday included security fixes for 74 vulnerabilities, one of which is a zero-day being used to deliver the MysterySnail RAT to Windows servers. Today is Microsoft’s…

CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans

Security Intelligence – Security Intelligence – CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans The Cybersecurity and Infrastructure Security Agency (CISA) announced the creation of a new agency…

Twitch hacked- Source code and Streamer payment figures leaked

Twitch has undergone a massive hack resulting in leaking the source code for its unreleased streaming service, creator payout details, and other sensitive information. The attack was carried out by…

Flubot Malware Targets Androids With Fake Security Updates

The banking trojan keeps switching up its lies, trying to fool Android users into clicking on a fake Flubot-deleting app or supposedly uploaded photos of recipients. The Flubot banking trojan…

New APT ChamelGang Targets Russian Energy, Aviation Orgs

First appearing in March, the group has been leveraging ProxyShell against targets in 10 countries and employs a variety of malware to steal data from compromised networks. A new APT…