Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

12/12/2024 0 Comments 0 tags

Details have emerged about a now-patched security vulnerability in Apple’s iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control (TCC) framework and result in unauthorized

SaaS Budget Planning Guide for IT Professionals

12/12/2024 0 Comments 0 tags

SaaS services are one of the biggest drivers of OpEx (operating expenses) for modern businesses. With Gartner projecting $247.2 billion in global SaaS spending this year, it’s no wonder SaaS

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

12/12/2024 0 Comments 0 tags

Malicious actors are exploiting a critical vulnerability in the Hunk Companion plugin for WordPress to install other vulnerable plugins that could open the door to a variety of attacks. The

Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested

12/12/2024 0 Comments 0 tags

A global law enforcement operation has failed 27 stresser services that were used to conduct distributed denial-of-service (DDoS) attacks and took them offline as part of a multi-year international exercise

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service

11/12/2024 0 Comments 0 tags

The Russian nation-state actor tracked as Secret Blizzard has been observed leveraging malware associated with other threat actors to deploy a known backdoor called Kazuar on target devices located in

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

11/12/2024 0 Comments 0 tags

Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the threat actors are continuing

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

11/12/2024 0 Comments 0 tags

A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tipping off endpoint detection and response (EDR) solutions.

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

11/12/2024 0 Comments 0 tags

Cybersecurity researchers have flagged a “critical” security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim’s

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

11/12/2024 0 Comments 0 tags

Cybersecurity researchers have discovered a novel surveillance program that’s suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from

Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia

11/12/2024 0 Comments 0 tags

A suspected China-based threat actor has been linked to a series of cyber attacks targeting high-profile organizations in Southeast Asia since at least October 2023. The espionage campaign targeted organizations