Category: security
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Microsoft warns of new version of the XCSSET infostealer It comes with new obfuscation, infection, and persistence techniques It was seen in “limited” attacks in the wild A new variant of a known macOS malware is making rounds on the internet, targeting users through infected Xcode projects. Researchers from the…
Read More
Thousands of iOS apps found to expose user data and leak Stripe keys
Security researchers from Cybernews found thousands of iOS apps with hardcoded secrets The secrets could be used in data leakage or wire fraud The majority of the secrets can be disregarded as low-sensitivity Researchers from the Cybernews team have found evidence to suggest that thousands of App Store applications have…
Read More
Chinese hackers targeting Juniper Networks routers, so patch now
Researchers from Mandiant saw a new hacking campaign targeting Juniper Networks routers They attributed it to a Chinese actor, targeting telcos, defense, and tech firms Users are urged to upgrade and scan their devices Chinese hackers are targeting Juniper Networks routers with different modifications of a backdoor malware, in an…
Read More
Google updates Chrome extension rules to ban affiliate link injection without user action or benefit
The Honey extension was recently accused of being a scam Google responded by updating its extension rules Some people believe the search engine giant took things too far Earlier this week, Google updated the Chrome extension rules for affiliates, basically telling its users that without tangible benefit, or user action,…
Read More
Apple fixes dangerous zero-day used in attacks against iPhones and iPads
Apple released a new fix for iOS and iPadOS It solves a zero-day used in “extremely sophisticated” attacks This is the third zero-day addressed this year Apple has released a new patch for iOS and iPadOS addressing a vulnerability abused in “extremely sophisticated” attacks. In a security advisory published earlier…
Read More
Sean Plankey selected as CISA director by President Trump
President Trump picks Sean Plankey as CISA director Plankey also served as part of Trump’s previous administration CISA faces potential turbulence under Trump President Trump has announced Sean Plankey as his pick for the Cybersecurity and Infrastructure Security Agency (CISA) Director in Sean Plankey. Plankey’s nomination will be heard before…
Read More