Trending Cyber Security Threats Scanner

NSA Releases Guide to Combat BlackLotus Malware BlackLotus uses a known flaw dubbed "Baton Drop," tracked as CVE-2022-21894, to bypass beyond security precautions made by the devices Secure Boot start-up procedure. Malicious cyber acto... #BlackLotus itsecuritynews.info/nsa-rele…

Microsoft Teams Vulnerability Let Attackers Deliver Malware From External Accounts Microsoft Teams is used by over 280 million active users every month and is a popular way for organizations to talk an... #Services #TomEllson #MaxCorbridge #Microsoft gbhackers.com/microsoft-team…

Condi DDoS botnet distributed through TP-Link WiFi router flaw Schneider Electric's ION and PowerLogic power meters are being affected by a high-severity vulnerability, tracked as CVE-2022-46680. The vulnerability could be levera... #Technology #WiFi scmagazine.com/brief/device-…

More than a million GitHub repositories potentially vulnerable to RepoJacking Researchers found 36,983 GitHub repositories vulnerable to RepoJacking. Attackers claim the old username of a reposit... #Lyft #B2B #Google #Technology #GitHub #ServicesB2B securityaffairs.com/147756/h…

Apple M1 Chips face LockBit Ransomware threat in development Apple M1 Chips face LockBit Ransomware threat in development in development. LockBit has established its own research and development (R&D) tea... #Cybersecurity #Apple #Technology #LockBit itsecuritynews.info/apple-m1…

Operation Triangulation: Apple releases patches for zero-day exploits in spyware campaign Russian spyware known as Operation Triangulation has been active since 2019. The FSB has accused the U.S. intelligence community of using the... #FSB #US #Apple andreafortuna.org/2023/06/22…

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans A new phishing campaign has set its sights on India and the U.S. by leveraging JavaScript files to deliver remote access trojans. The multi-s... #India #JavaScript #Technology #US thehackernews.com/2023/06/mu…

Kaspersky crimeware report: LockBit and phishing Kaspersky found a Business Email Compromise (BEC) case, active since at least Q3 2022. The attackers target German-speaking companies in the DACH region. The Reply-... #Kaspersky #DACH #Technology #BEC lnkd.in/dyyx9kNc

RedEyes Group Targets Individuals with Wiretapping Malware North Korean state-sponsored advanced persistent threat (APT) group RedEyes has been observed targeting individuals using wiretapping malware. The campaign was discover... #ASEC #CHM #RedEyes lnkd.in/ew36Xkzx

Cyber Security Breach at Canada Post A security breach took place with one of Canada Post's IT service providers, CompuCom. The breach exposed non-sensitive personal information such as em... #CanadaPost #Politics #Cybersecurity #Technology #CompuCom cupw.ca/en/cyber-security-br…

New Tsunami botnet targets Linux SSH servers Researchers warn of an ongoing Tsunami DDoS botnet campaign targeting inadequately protected Linux SSH servers. Threat actors behind these attacks were ... #Tsunamis #Weather #Linux #Technology #LogCleaner bit.ly/3Jo86z5

Mirai botnet targets 22 flaws in D-Link, Zyxel, Netgear devices A variant of the Mirai botnet is targeting 22 known seccurity issues in various connected products. The malware has been id... #Politics #MediaTek #Telco #Cybersecurity #Technology #Unit lnkd.in/dwTC8cc3

NSA warns of 'false sense of security' against BlackLotus malware NSA warns of 'false sense of security' against BlackLotus malware. Agency: Some network administrators could have "a false sense of. security" about thei... #Microsoft #NSA #Technology bit.ly/3Ximyyl

North Korean APT targets defectors, activists with infostealer malware The state-sponsored RedEyes group -- aka APT37, ScarCruft and Reaper -- was observed recently using an infostealer tha... #Reaper #APT37 #Cybersecurity #Politics #ASEC #Technology bit.ly/3NrxlBU

PyPI Attackers Still At It: Malicious Packages Drop Trojans and Info-stealers This month, Sonatype security researchers flagged hundreds of malicious open source and malware detection systems. Ten of these p... #Opensource #PyPI #Technology #Sonatype share.sonatype.social/b44jj

Apple issues emergency patch to address alleged spyware vulnerability Apple issued a security update for all its operating systems to patch dangerous vulnerabilities that could allow attackers to take over someones entire device. Th... #Apple #Russia dlvr.it/Sr2hRr

Apple patches kernel bug used in TriangleDB spyware attacks Kaspersky researchers say Apple's TriangleDB spyware may be targeting Mac computers with similar malware. Researchers found a method named populateWithFieldsMacOSOn... #Apple #Kaspersky #Mac theregister.com/2023/06/21/a…

Phishing Campaigns Abusing Telegram to Bypass MFA A Telegram channel is used to receive the stolen username and password of banking or Microsoft 365 accounts. The channel is also used to bypass two-factor authentication (2FA)... #Telegram #Technology netskope.com/blog/phishing-c…

Researcher Identifies Popular Swing VPN Android App as DDoS Botnet Swing VPN is a legitimate VPN app developed for Android and iOS systems by Limestone Software Solutions. The Swing VPN app, which is available on the o... #Android #Technology #Mobile buff.ly/44d6yju

Microsoft Office 365 AitM phishing reveals signs of much larger BEC campaign Researchers investigating an Office 365 account compromise resulting from an adversary-in-the-middle (AitM) ph... #Technology #BigData #AitM #Office365 #Services #SP500 #MFA arnnet.com.au/article/707644…