Security researchers at Microsoft have released details of a new widespread campaign distributing an infamous piece of fileless malware that was primarily being found targeting European and Brazilian users earlier this year.Dubbed Astaroth, the malware trojan has been making the rounds since at least 2017 and designed to steal users' sensitive information like their … [Read more...] about Watch Out! Microsoft Spotted Spike in Astaroth Fileless Malware Attacks
attacks
OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks
In recent years, several groups of cybersecurity researchers have disclosed dozens of memory side-channel vulnerabilities in modern processors and DRAMs, like Rowhammer, RAMBleed, Spectre, and Meltdown.Have you ever noticed they all had at least one thing in common?That's OpenSSH.As a proof-of-concept, many researchers demonstrated their side-channel attacks against OpenSSH … [Read more...] about OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks
Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks
If you use the Firefox web browser, you need to update it right now.Mozilla earlier today released Firefox 67.0.3 and Firefox ESR 60.7.1 versions to patch a critical zero-day vulnerability in the browsing software that hackers have been found exploiting in the wild.Discovered and reported by Samuel Groß, a cybersecurity researcher at Google Project Zero, the vulnerability could … [Read more...] about Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks
Unpatched Flaw in UC Browser Apps Could Let Hackers Launch Phishing Attacks
A bug hunter has discovered and publicly disclosed details of an unpatched browser address bar spoofing vulnerability that affects popular Chinese UC Browser and UC Browser Mini apps for Android.Developed by Alibaba-owned UCWeb, UC Browser is one of the most popular mobile browsers, specifically in China and India, with a massive user base of more than half a billion users … [Read more...] about Unpatched Flaw in UC Browser Apps Could Let Hackers Launch Phishing Attacks
Exploits for Social Warfare WordPress Plugin Reach Critical Mass
More and more attacks taking advantage of a XSS and RCE bug in the popular plugin have cropped up in the wild. Source link … [Read more...] about Exploits for Social Warfare WordPress Plugin Reach Critical Mass