If only you had to worry about malware, with Jason Haddix: Lock and Code S05E04
This week on the Lock and Code podcast, we speak with Jason Haddix about how businesses can protect against modern cyberthreats.
Read moreZero-Day
Update now! Apple releases patch for zero-day vulnerability
Apple has released new security updates for several products including a patch for a zero-day vulnerability which may have been exploited.
Read moreZero-day deploys remote code execution vulnerability via Word documents
Categories: Business Tags: microsoft Tags: zero-day Tags: exploit Tags: CVE-2023-36884 Tags: storm-0978 Tags: email Tags: phish Tags: phishing Tags: Ukraine We take a look at reports of an exploit being deployed via booby trapped Word documents. |
The post Zero-day deploys remote code execution vulnerability via Word documents appeared first on Malwarebytes Labs.
Read more3CX Breach Was a Double Supply Chain Compromise
Credit to Author: BrianKrebs| Date: Fri, 21 Apr 2023 01:05:44 +0000
We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on LinkedIn to lure people into opening malware disguised as a job offer; malware targeting Mac and Linux users working at defense and cryptocurrency firms; and software supply-chain attacks nested within earlier supply chain attacks.
Read moreUpdate now, there’s a Chrome zero-day in the wild
Categories: News Tags: chrome Tags: browser Tags: update Tags: vulnerability Tags: CVE Tags: exploit Tags: exploitation Tags: zero-day Users of Chrome should ensure they’re running the latest version to patch an integer overflow in the Skia graphics library. |
The post Update now, there’s a Chrome zero-day in the wild appeared first on Malwarebytes Labs.
Read moreZero-day spells disaster for Bitcoin ATM
Categories: News Tags: ATM Tags: bitcoin Tags: cryptocurrency Tags: wallet Tags: hot Tags: cold Tags: 0 day Tags: zero day We look at a $1.5m heist of cryptocurrency via compromised Bitcoin ATMs. |
The post Zero-day spells disaster for Bitcoin ATM appeared first on Malwarebytes Labs.
Read moreRubrik is latest victim of the Clop ransomware zero-day campaign
Categories: News Categories: Ransomware Tags: Rubrik Tags: GoAnywhere MFT Tags: Fortra Tags: Clop ransomware Tags: Clop Tags: ransomware Tags: CVE-2023-0669 Tags: zero-day Rubrik, a cloud data management company, has revealed that Clop made use of an infamous GoAnywhere flaw. |
The post Rubrik is latest victim of the Clop ransomware zero-day campaign appeared first on Malwarebytes Labs.
Read more4 over-hyped security vulnerabilities of 2022
Categories: Exploits and vulnerabilities Categories: News Tags: wormable Tags: zero-day Tags: spring4shell Tags: cve-2022-34718 Tags: log4j Tags: openssl Tags: cve-2022-36934 Tags: cve-2022-27492 Tags: cve-2022-22965 Tags: cve-2022-22963 What does it take to make the discussion of vulnerabilities useful? And where did this go wrong in 2022? |
The post 4 over-hyped security vulnerabilities of 2022 appeared first on Malwarebytes Labs.
Read more