5+ day, 9+ hour ago   (399+ words) Citizen Lab has confirmed that one of the attacks exploited an iMessage vulnerability that could infect an iPhone without its owner having to click on a link. The investigation, conducted jointly with Serbian organisation SHARE Foundation, involved analysing the individual's…...

6+ day, 9+ hour ago   (454+ words) Fire Ant is a new operation targeting routers made by the US company, which are widely used by governments and large corporations, continuing a trend also seen with Volt Typhoon and Salt Typhoon. "When an attacker controls the routers, they…...

1+ week, 1+ day ago   (329+ words) The cloud storage provider detected unauthorised access between 4 and 21 August. Files were viewed or downloaded in fewer than one-third of the affected accounts. A flaw in Lenovo ID's email verification system enabled unauthorised access to around 5,000 Dropbox accounts between 4 and…...

1+ week, 4+ day ago   (354+ words) The vendor released urgent patches for two critical vulnerabilities and advised disconnecting servers from the internet to block active exploits. "The PaperCut Software security response team is investigating the active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF....

2+ week, 4+ day ago   (231+ words) Attackers used fake debt relief offers and follow-up phone calls to bypass security controls without using malicious links or files. Researchers from the cybersecurity company Check Point Software Technologies Ltd. have identified and blocked a sophisticated large-scale phishing email campaign…...

2+ week, 5+ day ago   (404+ words) The Chinese e-commerce giant allegedly used inaudible audio signals to device-fingerprint users. AliExpress may have used an uncommon technique to identify users' devices: generating inaudible audio signals from the browser and analyzing how each computer processes them. This was discovered…...

3+ week, 1+ day ago   (262+ words) Cybercrime hits the dashboard: A vulnerability in Android updates lets attackers secretly install malicious code, extract technical data, and execute ad fraud. A novel malicious software campaign targeting Android specifically for vehicle smart screens has been detected by the research…...

3+ week, 4+ day ago   (509+ words) The Japanese company, which specializes in IT systems for government, water, education, energy, industry, and healthcare, confirmed unauthorized access to its internal systems on August 14 and has yet to identify the attacker or determine how the breach occurred. The Japanese…...

4+ week, 1+ day ago   (340+ words) The North Korean group is refining its social engineering tactics and exploiting unpatched vulnerabilities to compromise strategic sectors. A new campaign of Operation Dream Job has been detected by Check Point Research. It is a well-known cyberespionage operation linked to…...

4+ week, 1+ day ago   (581+ words) Schools often operate with limited cybersecurity budgets and relatively small IT teams, while managing vast amounts of sensitive information. CISA unveils a new roadmap to help them prevent and respond to cyberattacks. "Cyberattacks on K-12 schools and districts jeopardize not only…...