RatMilad, a unique Android malware that masquerades as a VPN and phone number spoofing programme. It has seen to attack a Middle Eastern enterprise mobile device. According to research Zimperium published with The Hacker News, the mobile trojan performs as…
Nearly two weeks after Optus reported its own incident, Australia’s largest telecoms firm Telstra disclosed that it had a data compromise via a third party. Telstra telecom data breach has occurred, according to the organization’s chief information security officer for…
A flaw in argument injection made RCE risky SonarSource researchers discovered a vulnerability in one of Composer’s key parts that might have been exploited to attack code repositories. The primary package manager for PHP applications. Composers can find and download…
On Friday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), citing indications of ongoing exploitation, added a previously disclosed significant vulnerability affecting Atlassian’s Bitbucket Server and Data Center to the Known Exploited Vulnerabilities (KEV) database. The problem, which has been…
The 9.8 million subscribers affected by the data breach have 1.2 million valid forms of identity. According to the Singtel-owned Australian operator, who also said that Deloitte has been hired to look into the hack’s causes. According to Optus, 1.2…
Chinese project maintainer appears to have closed the public issue without offering a patch. Nepxion Discovery Software, an open-source project that offers functionality for the Spring Cloud framework, contains an unpatched remote code execution (RCE) vulnerability. On September 9, information…
As it looks at (yep, more) reported vulnerabilities in Microsoft Exchange Server that affect the software’s 2013, 2016, and 2019 editions, Microsoft has released some consumer guidance. According to the business, “few targeted assaults employing the two vulnerabilities to access…
VMware’s virtualization software has been revealed to be used by threat actors to implant never-before-seen post-compromise implants. The implants allow them to take control of compromised systems while avoiding detection. It affects VMware ESXi, Linux vCenter servers, and Windows virtual…
As part of a novel strategy in its watering-hole attacks, the SolarMarker attack organization is encouraging victims to download phoney Chrome browser updates by attacking a WordPress-powered website. Researchers have identified the hacking group utilizing SolarMarker attack malware, which uses…
While providing security monitoring and incident response services around the beginning of August 2022, the GTSC SOC team learned that a vital infrastructure was under assault, specifically their Microsoft Exchange application. The research revealed that the attack used a 0-day…
