Lazarus Affiliate ‘ZINC’ Blamed for Campaign Against Security Researcher
New details emerge of how North Korean-linked APT won trust of experts and exploited Visual Studio to infect systems with ‘Comebacker’ malware.
Read More
Author: Elizabeth Montalbano
Utah Ponders Making Online ‘Catfishing’ a Crime
Pretending to be someone else online could become a criminal offense, setting a precedent for other states to follow.
Read MoreApple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update
An anonymous researcher identified bugs in the software’s kernel and WebKit browser engine that are likely part of an exploit chain.
Read MoreNorth Korea Targets Security Researchers in Elaborate 0-Day Campaign
Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor.
Read MoreThreat Actors Can Exploit Windows RDP Servers to Amplify DDoS Attacks
Netscout researchers identify more than 14,000 existing servers that can be abused by ‘the general attack population’ to flood organizations’ networks with traffic.
Read MoreGoogle Searches Expose Stolen Corporate Credentials
A phishing campaign spoofs Xerox notifications to lure victims into clicking on malicious HTML attachments.
Read MoreGoogle Research Pinpoints Security Soft Spot in Multiple Chat Platforms
Mystery of spying using popular chat apps uncovered by Google Project Zero researcher.
Read MoreAttackers Steal E-Mails, Info from OpenWrt Forum
Users of the Linux-based open-source firmware—which include developers from commercial router companies–may be targeted by phishing campaigns, administrators warn.
Read MoreRing Adds End-to-End Encryption to Quell Security Uproar
The optional feature was released free to users in a technical preview this week, adding a new layer of security to service, which has been plagued by privacy concerns.
Read More