A new attack campaign has been found to carry the newly discovered TimpDoor Android malware. It is distributed using phishing email messages and one of its main goals is to infiltrate the internal networks. Due to the fact that it…
Two years following the worldwide Mirai botnet attack criminals worldwide are utilizing it for various malicious uses. Recently security experts discovered that several new versions of it have been developed. An in-depth look shows that the new releases are the…
Cloud computing involves storing data and programs on remote servers and accessing the same via the internet. Cloud computing eliminates the need for having on-site servers and backup systems as all the data can be accessed from different terminals at…
The Wife Lovers adult site has been hacked and as a result of this incident the data of of 1.2 million users has been leaked. The reason for this is an outdated hashing technique and an overall weak security implementation.…
The McAfee brand was used in a recently discovered tech support scam that is gathering personal and credit card data from its victims. The tech support scam states “Your McAfee subscription has expired on 18 October 2018“. This page then…
A new zero-day Windows vulnerability has been disclosed via the Twitter social network. According to the information released by the security researcher the problem lies within the Microsoft Data Sharing service. It is used to allow data sharing between applications.…
The Chalubo botnet is a recently discovered malware which has been found to contain advanced features from other threats and being used for DoS (denial-of-service) attack campaigns. At the moment several attacks have been sighted. Our article gives an overview…
Threat actors have once again targeted the Magento platform. The purpose of the campaign is planting payment card skimmers on online stores. According to security researcher Willem de Groot, at least 20 Magento extensions have been abused due to a…
Contrary to popular belief, ransomware is not a new concept. Its first ever iteration came about back in 1991, a.k.a. almost two decades ago, when the Internet was still in its incipient stage. It was known as PC Cyborg, and…
The FreeRTOS operating system widely used by IoT devices can be abused by computer hackers to take down the instances. A team of security researchers recently announced that it contains many bugs allowing hackers numerous pathways to the target IoT…
A security researcher has discovered a jQuery File Upload Plugin Zero-Day Vulnerability that allows hackers to abuse thousands of sites. The flaw was announced to the public alongside the fact that this plugin as adopted by many services and platforms.…
Unknown computer hackers have breached the HealthCare.gov sign-up system and hijacked the personal data of about 75 000 users. This site hosted the service called Federally Facilitated Exchanges (FFE) and is used for healthcare insurance use. An official government announcement…
A security researcher has announced the discovery of a critical vulnerability in two of the most popular media players — MPlayer and VLC. The issue was found in the LIVE555 media streaming library which is used in both applications and…
The authors behind GandCrab ransomware virus have released decryption keys for citizens of Syria. The public release of these decryption keys became a reality due to a tweet made by a Syrian victim. He asked for help with the recovery…
iOS and macOS were long believed invincible but facts and statistics reveal another truth. According to a brand new research, there is a near 400% increase in cryptomining attacks against iPhones. This upsurge has been registered in the last two…
Three of the biggest tech companies, Apple, Microsoft, and Google, have made a cornerstone announcement regarding the support for TLS 1.1 and TLS 1.0. Mozilla is also “in” on this change. In a coordinated effort, the companies shared their intentions…
Security researchers from Anomali and Intel 471 made a troublesome discovery regarding personally identifiable information belonging to US residents. The researchers came across Dark Web communications that offered “a large quantity of voter databases for sale”. Personally identifiable information and…
Security researchers have uncovered a new malicious attack that involves well-known exploits with the purpose to circumvent security solutions. The campaign is spreading information stealers, or pieces of sophisticated spyware. More specifically, attackers are spreading a sophisticated information-stealing Trojan known…
Did you know that nearly 80% of all websites run on PHP? More particularly, “PHP is used by 78.9% of all the websites whose server-side programming language we know”, as revealed by W3Techs statistics. This fact alone makes PHP security…
Computer hackers are abusing the CVE-2018-7600 Drupal vulnerability using a new exploit called Drupalgeddon2 to take down sites. The attacks target site instances running versions 6,7 and 8 of Drupal and use the same security vulnerability which was addressed back…
