Security News | HKCERT

MITRE releases new list of top 25 most dangerous software bugs

MITRE shared today this year's list of the top 25 most dangerous weaknesses plaguing software during the previous two years. [...]

Bleepingcomputer 30 Jun 2023 921 Views

Researchers Detail 4 SAP Bugs, Including Flaw in ABAP Kernel

Patches are available for three bugs, but with technical details and PoCs now available, threat actors can craft targeted attacks.

Dark Reading 30 Jun 2023 1040 Views

NPM Plagued With 'Manifest Confusion' Malware-Hiding Weakness

The popular package manager for software developers has been vulnerable to this attack vector for a while, and negligent in fixing the problem, according to a former employee.

Dark Reading 29 Jun 2023 928 Views

Warning: JavaScript registry npm vulnerable to 'manifest confusion' abuse

Failure to match metadata with packaged files is perfect for supply chain attacks The npm Public Registry, a database of JavaScript packages, fails to compare npm package manifest data with the archive of files that data describes, creating an opportunity for the installation and execution of...

The Register 28 Jun 2023 7227 Views

Anatsa Android trojan now steals banking info from users in US, UK

A new mobile malware campaign since March 2023 pushes the Android banking trojan 'Anatsa' to online banking customers in the U.S., the U.K., Germany, Austria, and Switzerland.

Bleeping Computer 27 Jun 2023 894 Views

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy.

The Hacker News 27 Jun 2023 830 Views

New Mockingjay process injection technique evades EDR detection

Researchers at cybersecurity firm Security Joes discovered the method, which utilizes legitimate DLLs with RWX (read, write, execute) sections for evading EDR hooks and injecting code into remote processes.

Cyware News 27 Jun 2023 824 Views

Trojanized Super Mario game used to install Windows malware

A trojanized installer for the popular Super Mario 3: Mario Forever game for Windows has been infecting unsuspecting players with multiple malware infections.

Bleeping Computer 27 Jun 2023 1219 Views

Microsoft 365 users report Outlook, Teams won't start or freezes

Network and IT admins have been dealing with ongoing Microsoft 365 issues this week, reporting that some end users cannot use Microsoft Outlook or other Microsoft 365 apps. [...]

Bleepingcomputer 23 Jun 2023 1217 Views

Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

Apple on Wednesday released a slew of updates for iOS, iPadOS, macOS, watchOS, and Safari browser to address a set of flaws it said were actively exploited in the wild. [...]

thehackernews 23 Jun 2023 855 Views