At least $25bn worth of cryptocurrency is at risk due to “zero-day” exploits across more than 280 blockchain networks, according to cybersecurity firm Halborn. The company worked with Dogecoin, Litecoin and Zcash…
Tag: intelligence
PlugX Malware Masquerades as Debugger Tool
The PlugX remote access trojan, also known as Korplug, is using an open source Windows debugger tool called x64dbg to bypass security protections and gain control of a target system. x64dbg is…
Growing DDoS-for-hire Services; Experts Raise Alarm
The number of DDoS-for-hire services, also known as booters, has increased significantly in recent years. This increase in availability and affordability has made DDoS attacks accessible to individuals with little technical knowledge,…
Secret vulnerability found in high-level executive software
Security researchers have uncovered a secret vulnerability in software that high-level executives use for financial transactions. The software, which has not been named, was found to be vulnerable to an attack that…
Critical Vulnerability Discovered in Jenkins
Jenkins, the open-source automation server used for continuous integration and delivery, has a critical security vulnerability that could allow attackers to execute arbitrary code on affected systems. The vulnerability, assigned CVE-2023-4567, is…
Majority of Android apps contain third-party trackers
A study conducted by the Mozilla Foundation has revealed that safety labels for Android apps on the Google Play Store have “serious loopholes” that can result in misleading or incorrect information being…
CISA Warns of Actively Exploited Plex Bug
CISA has added a high-severity remote code execution vulnerability that has been active for almost three years on Plex Media Server to its security flaw list. This vulnerability, known as CVE-2020-5741, allows…
Hackers using trojanized macOS apps to spy on users
Hackers are targeting macOS users with trojanized versions of legitimate apps. These apps contain a backdoor that allows attackers to spy on users and steal sensitive data. Researchers have discovered several popular…
Clasiopa: New Cyberattack Cluster in Southeast Asia
Kaspersky researchers have identified a new cyberattack cluster named Clasiopa, which is actively targeting government organizations, military entities, and critical infrastructure in Southeast Asia. The group has been operational since at least…
Lazarus Group Uses New Winordll64 Backdoor
The notorious North Korean APT group, Lazarus, has deployed a new malware dubbed Winordll64 backdoor, according to researchers at Kaspersky. The Winordll64 backdoor shares similarities with Lazarus’ previous malware, which has targeted…