Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and LossThe Hacker News·Jul 19, 11:23 UTC · Jul 19, 2022Threat actor57
Do not use Tails OS until a flaw in the bundled Tor Browser will be fixedSecurity Affairs·May 26, 10:31 UTC · May 26, 2022Exploit / PoCCVE-2022-1802CVE-2022-152960
Microsoft Warns of Web Skimmers Mimicking Google Analytics and Meta Pixel CodeThe Hacker News·May 25, 03:04 UTC · May 25, 2022Data breach145
Ongoing DDoS attacks from compromised sites hit UkraineSecurity Affairs·Apr 29, 05:28 UTC · Apr 29, 2022Threat actor45
Iranian linked conglomerate MuddyWater comprised of regionally focused subgroupsCisco Talos·Mar 10, 13:02 UTC · Mar 10, 2022Ransomware57
Norton's Antivirus Product Now Includes an Ethereum MinerSchneier on Security·Jan 7, 12:13 UTC · Jan 7, 2022Industry30
DarkWatchman RAT uses Windows Registry fileless storage mechanismSecurity Affairs·Dec 20, 23:39 UTC · Dec 20, 2021Malware42
New Fileless Malware Uses Windows Registry as Storage to Evade DetectionThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2021Malware42
Hackers Increasingly Using HTML Smuggling in Malware and Phishing AttacksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2021Malware42
PuzzleMaker attacks with Chrome zeroKaspersky Securelist·Jun 8, 17:32 UTC · Jun 8, 2021Exploit / PoCCVE-2021-31955CVE-2021-31956CVE-2021-21220+1 CVEs60
Millions of sites could be hacked due to flaws in popular WordPress pluginsSecurity Affairs·Mar 19, 16:40 UTC · Mar 19, 2021Vulnerability42
Friday Squid Blogging: Linguine allo Scoglio RecipeSchneier on Security·Jan 15, 00:00 UTC · Jan 15, 2021Policy & legal30
Oracle Database 21c introduces 200+ innovationsHelp Net Security·Jan 14, 00:00 UTC · Jan 14, 2021AI research30
Malicious npm packages spotted delivering njRAT TrojanSecurity Affairs·Dec 1, 21:07 UTC · Dec 1, 2020Malware42
Flaw in popular NodeJS 'express-fileupload' module allows DoS attacks and code injectionSecurity Affairs·Aug 5, 08:00 UTC · Aug 5, 2020Exploit / PoCCVE-2020-7699150
Cisco Talos discloses technicals details of Chrome, Firefox flawsSecurity Affairs·Jul 5, 12:34 UTC · Jul 5, 2020VulnerabilityCVE-2020-6463CVE-2020-1241847
Adobe fixes critical flaws in Flash Player and FramemakerSecurity Affairs·Jun 9, 17:59 UTC · Jun 9, 2020VulnerabilityCVE-2020-9633CVE-2020-9643CVE-2020-9647+5 CVEs60
The Case for Limiting Your Browser ExtensionsKrebs on Security·Mar 6, 17:40 UTC · Mar 6, 2020AI tools & infra30
Security flaws allowed hijacking any TikTok accountSecurity Affairs·Jan 8, 13:27 UTC · Jan 8, 2020Exploit / PoC60
Magecart attackers target mobile users of hotel chain booking websitesSecurity Affairs·Sep 20, 06:58 UTC · Sep 20, 2019Threat actor45
Magecart Hackers Infect 17,000 Sites Through Misconfigured Amazon S3 BucketsThe Hacker News·Jul 11, 07:34 UTC · Jul 11, 2019Malware42
Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash LibraryThe Hacker News·Jul 9, 16:08 UTC · Jul 9, 2019VulnerabilityCVE-2019-1074447
Using steganography to obfuscate PDF exploitsSecurity Affairs·Jan 27, 07:00 UTC · Jan 27, 2019Exploit / PoCCVE-2013-334660
Hackers infect e-commerce sites by compromising their advertising partnerThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2019Vulnerability42
New Android Trojan “Xbot” Phishes Credit Cards and Bank Accounts, Encrypts Devices for RansomPalo Alto Unit 42·Nov 1, 10:06 UTC · Nov 1, 2018Malware30
Evilgrab Delivered by Watering Hole Attack on President of Myanmar’s WebsitePalo Alto Unit 42·Nov 1, 09:46 UTC · Nov 1, 2018VulnerabilityCVE-2014-633235
Cisco Talos discloses serious vulnerabilities in Foxit PDF ReaderHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2018Vulnerability55
VPNFilter Update - VPNFilter exploits endpoints, targets new devicesCisco Talos·Jun 6, 13:02 UTC · Jun 6, 2018Data breach45
Bitcoin web wallet addresses generated with a flawed library are exposed to bruteSecurity Affairs·Apr 16, 10:08 UTC · Apr 16, 2018Vulnerability30
Four malicious Chrome extensions affected over half a million users and global businessesSecurity Affairs·Jan 16, 14:18 UTC · Jan 16, 2018Threat actor45
NemucodAES ransomware & Kovter trojan bundled in the same campaignsSecurity Affairs·Oct 9, 10:00 UTC · Oct 9, 2017Ransomware57
Dissecting the Chrome Extension Facebook malwareKaspersky Securelist·Aug 31, 11:00 UTC · Aug 31, 2017Malware30