Security News
Discord discloses data breach after support agent got hacked
Discord is notifying users of a data breach that occurred after the account of a third-party support agent was compromised. [...]
Bleepingcomputer
13 May 2023 667 Views
New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages
A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks...
The Hacker News
13 May 2023 736 Views
Microsoft patches bypass for recently fixed Outlook zero-click bug
Microsoft fixed a security vulnerability this week that could be used by remote attackers to bypass recent patches for a critical Outlook zero-day security flaw abused in the wild. [...]
Bleepingcomputer
12 May 2023 687 Views
Millions of mobile phones come pre-infected with malware, say researchers
The threat is coming from inside the supply chain
Black Hat Asia Miscreants have infected millions of Androids worldwide with malicious firmware before the devices even shipped from their factories, according to Trend Micro researchers at Black Hat Asia.…
The Register
12 May 2023 7477 Views
Stealthier version of Linux BPFDoor malware spotted in the wild
A new, stealthier variant of the Linux malware 'BPFDoor' has been discovered, featuring more robust encryption and reverse shell communications. [...]
Bleepingcomputer
12 May 2023 674 Views
23-year-old Brit linked to 2020 Twitter attack and SIM-swap scheme pleads guilty
Admits to cyberstalking, wire fraud charges as Feds take $700k off him
A 23-year-old British citizen has confessed to "multiple schemes" involving computer crimes, including playing a part in the July 2020 Twitter attack that saw the accounts of Amazon...
The Register
11 May 2023 7518 Views
Google brings dark web monitoring to all U.S. Gmail users
Google announced today that all Gmail users in the United States will soon be able to use the dark web report security feature to discover if their email address has been found on the dark web. [...]
Bleepingcomputer
11 May 2023 781 Views
New ransomware decryptor recovers data from partially encrypted files
Security researchers have shared a new Python-based ransomware recovery tool named 'White Phoenix' on GitHub, which lets victims of ransomware strains that use intermittent encryption recover their files for free. [...]
Bleepingcomputer
11 May 2023 781 Views
Critical Ruckus RCE flaw exploited by new DDoS botnet malware
A new malware botnet named 'AndoryuBot' is targeting a critical-severity flaw in the Ruckus Wireless Admin panel to infect unpatched Wi-Fi access points for use in DDoS attacks.
Bleeping Computer
10 May 2023 702 Views
New Ransomware Strain 'CACTUS' Exploits VPN Flaws to Infiltrate Networks
Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain initial access to targeted networks.
The Hacker News
10 May 2023 715 Views
