Security Affairs

NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs

NSA, CISA, FBI, DOE, and EPA warn of active AI-assisted attacks against Siemens S7 PLCs across US critical infrastructure ...
Security Affairs

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline ...
Security Affairs

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog.
Security Affairs

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

The US charged 17 Iranians over a years-long hacking campaign that stole 31TB from universities, companies and government ...
Security Affairs

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

StopAndProtect turned nearly 2K hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance ...
Security Affairs

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog.
Security Affairs

50,000 Stripe Secrets Leaked in Public Code

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours.
Security Affairs

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password ...
Security Affairs

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Microsoft tracked +30 MacSync Stealer domains by focusing on behavioral patterns, revealing a campaign targeting ...
securityaffairs

Hackers Expose Data of 1.2 Million Heights Finance Customers

A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company that ...
Security Affairs

Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution

Zoom patches a zero-click flaw that could let a meeting participant execute code on another user’s computer through the annotation feature.
securityaffairs

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services. Fortinet’s FortiGuard Labs disclosed Evooo1Bot in ...