Tag: security
Google Chrome security flaw could have let hackers spy on all your online habits
Google Chrome has patched its first zero-day flaw of the year The bug allowed cyber-espionage, primarily against targets in Russia Kaspersky researchers thanked for finding bug, and users told to update now Google has fixed a high-severity zero-day vulnerability in its Chrome browser that was being exploited in the wild.…
Read More
Chinese government hackers allegedly spent years undetected in foreign phone networks
Security researchers Sygnia discover attack after responding to a separate incident The attack was attributed to a Chinese state-sponsored threat actor Weaver Ant group lurked for years, stealing sensitive data and moving laterally Chinese state-sponsored threat actors allegedly spent four years lurking in the IT infrastructure of a “major” Asian…
Read More
Critical security flaw in Next.js could spell big trouble for JavaScript users
Researchers spot critical vulnerability in Next.js If authorizations happen in middleware, they could be bypassed in older versions A patch, and a temporary workaround, are both available, so update now Experts have warned there is a critical severity flaw in the Next.js open source web development framework which allows threat…
Read More
Fake file converters are stealing info, pushing ransomware, FBI warns
The FBI warns about web-based file conversion projects being malicious Some are dropping malware, others stealing sensitive data FBI urges victims to report the attacks Free online file converters, joiners, and similar productivity tools are actually covers for data scraping and malware/ransomware distribution campaigns, the FBI is warning. The Bureau’s…
Read More
Coinbase targeted after recent Github attacks
Researchers claim primary target of a recent cascading supply chain attack was Coinbase The cryptocurrency exchange was not compromised, but hundreds of other projects might suffer The attack went through a GitHub Action tool The endgame of the recent cascading supply chain attack on GitHub was to breach Coinbase, one…
Read More
North Korea unveils new military unit targeting AI attacks
North Korea has established a new AI hacking department The new group will be called ‘Research Center 227’ North Korea carried out many cyber offensives in 2024, including a fake interview campaign The Democratic People’s Republic of Korea (North Korea) has established “Research Center 227” according to reports from Daily…
Read More