Lazarus BTC Changer. Back in action with JS sniffers redesigned to steal crypto
Group-IB observed the North Korea-linked Lazarus APT group stealing cryptocurrency using a never-before-seen tool. In the last five years, JavaScript...
US Gov sanctions Russia and expels 10 diplomats over SolarWinds hack
The U.S. and UK attributed with “high confidence” the recently disclosed supply chain attack on SolarWinds to Russia’s Foreign Intelligence...
Chrome users, here’s how to opt out of the Google FLoC trial
Two weeks after Google launched a trial to replace run-of-the-mill online user tracking with new-fangled online user tracking, several companies...
“Huge upsurge” in DDoS attacks during pandemic
Researchers at Netscout have released a report analyzing the malicious internet traffic of 2020 and comparing it to the years...
Malwarebytes releases SMB Cybersecurity Trust & Confidence Report 2021
What can we say about 2020 that hasn’t already been said? Beliefs were shaken. Values were questioned. Truths were tested....
QBot Malware Replaces IcedID in Malspam Campaigns
QBot malware is making a comeback replacing IcedID in Malspam campaigns. Security researchers have noticed that malware distributors are once...
Foreign hackers attack Russian research institutes
Against the backdrop of the pandemic, foreign hackers have increased their activity against Russian research institutes which specialize in developing...
Cracked Version of few Software Steal Session Cookies and Monero Cryptocurrency
Bitdefender which is a Romania-based cybersecurity organization located in Bucharest has recently cautioned that cracked versions of Microsoft Office and...
Capcom Released the Final Update on Ransomware Attack
Capcom, known for multi-million-selling game franchises, announced in November 2020, that it had been hit by a ransomware attack: Hackers...
Defeat-Defender – Powerful Batch Script To Dismantle Complete Windows Defender Protection And Even Bypass Tamper Protection
Powerfull Batch File To Disable Windows Defender,Firewall,Smartscreen And Execute the payloadUsage :Edit Defeat-Defender.bat on this line https://github.com/swagkarna/Defeat-Defender/blob/93823acffa270fa707970c0e0121190dbc3eae89/Defeat-Defender.bat#L72 and replace the...
Swissknife – Scriptable VSCode Extension To Generate Or Manipulate Data. Stop Pasting Sensitive Data In Webpag
The developers swissknife. Do conversions and generations right out of vs code. Extendable with user scripts Available in the Visual...
Cyber thieves move $760 million stolen in the 2016 Bitfinex heist
Over $760 million worth of Bitcoin that were stolen from cryptocurrency exchange Bitfinex in 2016 were moved to new accounts....
April 2021 Security Patch Day fixes a critical flaw in SAP Commerce
April 2021 Security Patch Day includes 14 new security notes and 5 updates to previously released notes, one of them...
For the second time in a week, a Google Chromium zero-day released online
For the second time in a week, a Chromium zero-day remote code execution exploit code has been released on Twitter, multiple...
WhatsApp flaws could have allowed hackers to remotely hack mobile devices
WhatsApp addressed two security vulnerabilities in its app for Android that could have been exploited to remotely hack the victim’s...
CVE-2021-30185
Summary: CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. Reference Links(if available): https://github.com/indico/indico/releases/tag/v2.3.4...
CVE-2020-14104
Summary: A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. Reference...
CVE-2021-30184
Summary: GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related...
CVE-2021-24027
Summary: A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed...
CVE-2021-21423
Summary: `projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.json`, `.gitignore`, GitHub Workflows, `eslint`,...
FBI shuts down malware on hundreds of Exchange servers, opens Pandora’s box
A rather remarkable story has emerged, setting the scene for lively debates about permissible system access. A press release from...
Update now! Chrome needs patching against two in-the-wild exploits
A day late and a dollar short is a well-known expression that comes in a few variations. But this version...
Ransomware disrupts food supply chain, Exchange exploitation suspected
When malware found its way into the network of Bakker Logistiek, a company specializing in the transport and warehousing of...
Linux, MacOS Malware Hidden in Fake Browserify NPM Package
Over the course of the weekend, Sonatype's automated malware detection system spotted a serious exceptional malware sample published to the...
