Category: Bleeping Computer

Hacker looking at infected devices
18
Oct
2023

MATA malware framework exploits EDR in attacks on defense firms

An updated version of the MATA backdoor framework was spotted in attacks between August 2022 and May 2023, targeting oil…

Android
18
Oct
2023

Google Play Protect adds real-time scanning to fight Android malware

Google has announced new, real-time scanning features for Google Play Protect that make it harder for malicious apps employing polymorphism…

Hacker walking into a door
18
Oct
2023

Single Sign On and the Cybercrime Ecosystem

It’s not just your perception, cybercrime is increasing dramatically. At Flare we’ve identified a 112% increase in data extortion ransomware…

WinRAR used in attacks
18
Oct
2023

Google links WinRAR exploitation to multiple state hacking groups

Google says that several state-backed hacking groups have joined ongoing attacks exploiting a high-severity vulnerability in WinRAR, a compression software used by…

Linux malware
18
Oct
2023

Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials

Hackers are scanning for internet-exposed Jupyter Notebooks to breach servers and deploy a cocktail of malware consisting of a Linux…

Citrix
18
Oct
2023

Recently patched Citrix NetScaler bug exploited as zero-day since August

A critical vulnerability tracked as CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices has been actively exploited as a zero-day since late August,…

Twitter
18
Oct
2023

Twitter testing annual subscriptions for tweeting and retweeting

Twitter, now renamed X, is testing new $1 annual subscriptions to provide unverified accounts access to core features like tweeting…

Microsoft 365
18
Oct
2023

Microsoft disables bad spam rule flagging all sent emails as junk

Microsoft has disabled a bad anti-spam rule flooding Microsoft 365 admins’ inboxes with blind carbon copies (BCC) of outbound emails mistakenly…

Hacker
18
Oct
2023

FBI warns of extortion groups targeting plastic surgery offices

The FBI warns that cybercriminals are using spoofed emails and phone numbers to target plastic surgery offices across the United States…

Cisco
17
Oct
2023

Over 10,000 Cisco devices hacked in IOS XE zero-day attacks

Update October 17, 16:40 EDT: Added new information on breached Cisco IOS XE devices. Attackers have exploited a recently disclosed…

Over 40,000 admin portal accounts use
17
Oct
2023

Over 40,000 admin portal accounts use ‘admin’ as a password

Security researchers found that IT administrators are using tens of thousands of weak passwords to protect access to portals, leaving…

Kwik Trip
17
Oct
2023

KwikTrip all but says IT outage was caused by a cyberattack

Kwik Trip has released another statement on an ongoing outage, all but confirming it suffered a cyberattack that has led…