Technology

Jun 21, 2023Ravie LakshmananMobile Security / Spyware More details have emerged about the spyware implant that’s delivered to iOS devices as part of a campaign called Operation Triangulation. Kaspersky, which discovered the operation after becoming one of the targets at the start of the year, said the malware has a lifespan of 30 days, after
0 Comments
Jun 20, 2023Ravie LakshmananOperational Technology Three security vulnerabilities have been disclosed in operational technology (OT) products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors. “OT:ICEFALL demonstrates the need for tighter scrutiny
0 Comments
Honor 90 Lite was launched in Europe by the Chinese smartphone manufacturer on Tuesday. The handset is powered by MediaTek’s octa-core Dimensity 6020 SoC paired with 8GB of RAM and 256GB inbuilt storage. The Honor 90 Lite features a 6.7-inch LTPS LCD display. The handset comes preloaded with Android 13 out-of-the-box. The handset features a
0 Comments
Jun 20, 2023Ravie LakshmananVulnerability / Data Security Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems. Tracked as CVE-2023-27992 (CVSS score: 9.8), the issue has been described as a pre-authentication command injection vulnerability. “The
0 Comments
OnePlus will reportedly unveil the next generation of its numbered series of smartphones, the OnePlus 12, later this year in China. While little is known about OnePlus’ next flagship, the purported smartphone’s display specifications have emerged along with details on the OnePlus Ace 2 Pro, which could debut in China soon. The phones’ specifications have
0 Comments
A new information-stealing malware called Mystic Stealer has been found to steal data from about 40 different web browsers and over 70 web browser extensions. First advertised on April 25, 2023, for $150 per month, the malware also targets cryptocurrency wallets, Steam, and Telegram, and employs extensive mechanisms to resist analysis. “The code is heavily
0 Comments
Jun 19, 2023Ravie LakshmananEndpoint Security / Hacking Cybersecurity researchers have uncovered a set of malicious artifacts that they say is part of a sophisticated toolkit targeting Apple macOS systems. “As of now, these samples are still largely undetected and very little information is available about any of them,” Bitdefender researchers Andrei Lapusneanu and Bogdan Botezatu
0 Comments
Jun 15, 2023Ravie Lakshmanan A suspected China-nexus threat actor dubbed UNC4841 has been linked to the exploitation of a recently patched zero-day flaw in Barracuda Email Security Gateway (ESG) appliances since October 2022. “UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People’s Republic of China,” Google-owned Mandiant said in a
0 Comments
Jun 16, 2023Ravie LakshmananCyber Attack / Ransomware Progress Software on Thursday disclosed a third vulnerability impacting its MOVEit Transfer application, as the Cl0p cybercrime gang deployed extortion tactics against affected companies. The new flaw, which is yet to be assigned a CVE identifier, also concerns an SQL injection vulnerability that “could lead to escalated privileges
0 Comments
Jun 16, 2023Ravie LakshmananRansomware / Cyber Crime The U.S. Department of Justice (DoJ) on Thursday unveiled charges against a Russian national for his alleged involvement in deploying LockBit ransomware to targets in the U.S., Asia, Europe, and Africa. Ruslan Magomedovich Astamirov, 20, of Chechen Republic has been accused of perpetrating at least five attacks between
0 Comments
Jun 17, 2023Ravie LakshmananCryptojacking / Network Security Cybersecurity researchers have discovered previously undocumented payloads associated with a Romanian threat actor named Diicot, revealing its potential for launching distributed denial-of-service (DDoS) attacks. “The Diicot name is significant, as it’s also the name of the Romanian organized crime and anti-terrorism policing unit,” Cado Security said in a
0 Comments
Jun 16, 2023Ravie LakshmananEndpoint Security / Network Security The threat actor known as ChamelGang has been observed using a previously undocumented implant to backdoor Linux systems, marking a new expansion of the threat actor’s capabilities. The malware, dubbed ChamelDoH by Stairwell, is a C++-based tool for communicating via DNS-over-HTTPS (DoH) tunneling. ChamelGang was first outed
0 Comments
Samsung Galaxy S23 series with Android 13-based One UI 5.1 skin was launched in February this year. Now the flagship smartphones have reportedly started receiving the June 2023 Android security patch. The latest firmware brings a 2x portrait option to the camera app and addresses autofocus issues. The update is said to have several stability
0 Comments