The Chrome zero-day exploited and patched by Google a few weeks ago has a new ID of CVE-2023-5129 and a description reveling that the vulnerability is not in Chrome, but is in the libwebp library, …
Cisco Warns of IOS Software Zero-Day Exploitation Attempts
Cisco announced patches for multiple vulnerabilities that are impacting its products. One of the vulnerabilities is a medium-severity flaw in IOS and IOS XE software and it appears to have been …
Continue Reading about Cisco Warns of IOS Software Zero-Day Exploitation Attempts
macOS 14 Sonoma Patches 60 Vulnerabilities
Apple has released macOS 14 Sonoma, which includes patches for over 60 vulnerabilities. These flaws could potentially allow attackers to obtain sensitive information, execute arbitrary code with …
Continue Reading about macOS 14 Sonoma Patches 60 Vulnerabilities
Google Open Sources Binary File Comparison Tool BinDiff
Google has open-sourced BinDiff, a binary file comparison utility that has been maintained by the company for over a decade. BinDiff allows users to identify similarities and differences in …
Continue Reading about Google Open Sources Binary File Comparison Tool BinDiff
Stolen GitHub Credentials Used to Push Fake Dependabot Commits
Threat actors have carried out a campaign where they injected fake Dependabot contributions into hundreds of GitHub repositories to insert malicious code, according to a report by Checkmarx. In this …
Continue Reading about Stolen GitHub Credentials Used to Push Fake Dependabot Commits
Firefox 118 Patches High-Severity Vulnerabilities
Mozilla has released security updates for Firefox and Thunderbird to address nine vulnerabilities, including high-severity flaws. Firefox 118 includes patches for all nine vulnerabilities, which are …
Continue Reading about Firefox 118 Patches High-Severity Vulnerabilities
UAE-Linked APT Targets Middle East Government With New ‘Deadglyph’ Backdoor
Stealth Falcon is an advanced persistent threat (APT) actor with ties to the United Arab Emirates (UAE). The APT group has previously targeted journalists, activists, and dissidents on behalf of the …
Continue Reading about UAE-Linked APT Targets Middle East Government With New ‘Deadglyph’ Backdoor
Xenomorph Android Banking Trojan Targeting Users in US, Canada
ThreatFabric recently analyzed Xenomorph Android banking samples that display an expanded target list, including North American users. Threat researchers first discovered Xenomorph in February 2022. …
Continue Reading about Xenomorph Android Banking Trojan Targeting Users in US, Canada
Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks
The University of Toronto's Citizen Lab group and Google's Threat Analysis Group recently discovered three zero-days: CVE-2023-41991 (signature verification bypass), CVE-2023-41992 (local privilege …
Stealthy APT Gelsemium Seen Targeting Southeast Asian Government
Palo Alto Networks observed the advanced persistent threat (APT) actor Gelsemium targeting government organizations in Southeast Asia. The cyberespionage campaign deployed web shells, backdoors, and a …
Continue Reading about Stealthy APT Gelsemium Seen Targeting Southeast Asian Government