Security News
Password recovery tool infects industrial systems with Sality malware
A threat actor is infecting industrial control systems (ICS) to create a botnet through password "cracking" software for programmable logic controllers (PLCs).
Bleepingcomputer
18 Jul 2022 867 Views
PayPal phishing kit added to hacked WordPress sites for full ID theft
A newly discovered phishing kit targeting PayPal users is trying to steal a large set of personal information from victims that includes government identification documents and photos. [...]
Bleepingcomputer
15 Jul 2022 922 Views
New Lilith ransomware emerges with extortion site, lists first victim
A new ransomware operation has been launched under the name 'Lilith,' and it has already posted its first victim on a data leak site created to support double-extortion attacks. [...]
Bleepingcomputer
14 Jul 2022 979 Views
New UEFI firmware flaws impact over 70 Lenovo laptop models
The UEFI firmware used in several laptops made by Lenovo is vulnerable to three buffer overflow vulnerabilities that could enable attackers to hijack the startup routine of Windows installations. [...]
Bleepingcomputer
14 Jul 2022 893 Views
Hackers impersonate cybersecurity firms in callback phishing attacks
Hackers are impersonating well-known cybersecurity companies, such as CrowdStrike, in callback phishing emails to gain initial access to corporate networks.
Bleepingcomputer
13 Jul 2022 959 Views
Microsoft: Phishing bypassed MFA in attacks against 10,000 orgs
Microsoft says a massive series of phishing attacks has targeted more than 10,000 organizations starting with September 2021, using the gained access to victims' mailboxes in follow-on business email compromise (BEC) attacks.
Bleepingcomputer
13 Jul 2022 987 Views
New ‘Luna Moth’ hackers breach orgs via fake subscription renewals
A new data extortion group has been breaching companies to steal confidential information, threatening victims to make the files publicly available unless they pay a ransom.
The gang received the name Luna Moth and has been active since at least March in phishing campaigns that delivered remote access...
Bleepingcomputer
13 Jul 2022 923 Views
Hackers can unlock Honda cars remotely in Rolling-PWN attacks
A team of security researchers found that several modern Honda car models have a vulnerable rolling code mechanism that allows unlocking the cars or even starting the engine remotely. [...]
Bleepingcomputer
12 Jul 2022 917 Views
Microsoft says decision to unblock Office macros is temporary
Microsoft says last week's decision to roll back VBA macro auto-blocking in downloaded Office documents is only a temporary change. [...]
Bleepingcomputer
12 Jul 2022 1010 Views
Hackers Exploiting Follina Bug to Deploy Rozena Backdoor
A newly observed phishing campaign is leveraging the recently disclosed Follina security vulnerability to distribute a previously undocumented backdoor on Windows systems.
The Hacker News
11 Jul 2022 964 Views
