New DeepLoad Malware Dropped in ClickFix Attacks
A recently discovered malware family capable of stealing credentials and of intercepting browser interactions has been distributed using the ClickFix technique, ReliaQuest reports. Dubbed DeepLoad,…
Category: SecurityWeek
Toy Giant Hasbro Hit by Cyberattack
Toy and game giant Hasbro on Wednesday reported being hit by a cyberattack that has disrupted some of the company’s processes. In a filing with…
Depthfirst Raises $80 Million in Series B Funding
Software security startup Depthfirst has raised $80 million in Series B funding, bringing the total raised to $120 million in less than three months after…
US Charges Uranium Crypto Exchange Hacker
A US national was charged with hacking the decentralized cryptocurrency exchange Uranium Finance and causing it to shut down. The individual, Jonathan Spalletta, 36, of…
Axios NPM Package Breached in North Korean Supply Chain Attack
Malicious versions of the highly popular Axios NPM library were distributed to millions in a fresh supply chain attack blamed on North Korean hackers. A…
In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware
SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories…
Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign
Three exploitation campaigns targeting Cisco and Palo Alto Networks firewalls and Fortinet VPNs originate from IPs on the same subnets, GreyNoise has discovered. The threat…
RondoDox Botnet Takes ‘Exploit Shotgun’ Approach
A newly identified botnet takes a ‘shotgun’ approach to compromising devices, packing over 50 exploits targeting routers, servers, cameras, and other network products, Trend Micro…
Juniper Networks Patches Critical Junos Space Vulnerabilities
Juniper Networks has announced patches for nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical-severity flaws affecting Junos Space. More…
ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities
Trend Micro’s Zero Day Initiative (ZDI) this week published 13 advisories describing unpatched vulnerabilities in Ivanti Endpoint Manager. One of the flaws allows local attackers…
Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date
Apple on Friday announced significant updates to its bug bounty program and the company is now offering up to $2 million for complex exploit chains. …
Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks
Google Threat Intelligence Group (GTIG) and Mandiant have continued to analyze the recent Oracle E-Business Suite (EBS) extortion campaign and their researchers have identified some…