 |
|
| Apple has patched two zero-day vulnerabilities that were being used in the wild. Users are advised to update as soon as they can.
Categories: Exploits and vulnerabilities Tags: IOMobileFrameBufferiOSiPadOSmacOSMonterey |
The post Update now! Apple patches another actively used zero-day appeared first on Malwarebytes Labs.
|
|
| Apple has patched two zero-day vulnerabilities that were being used in the wild. Users are advised to update as soon as they can.
Categories: Exploits and vulnerabilities Tags: IOMobileFrameBufferiOSiPadOSmacOSMonterey |
The post Update now! Apple patches another actively used zero-day appeared first on Malwarebytes Labs.
 |
|
| In one day’s time, Let’s Encrypt will begin revoking a number of mis-issued certificates. Check now if you’re affected
Categories: Privacy Tags: certificatesecuritySSLTLSwebsite |
The post Let’s Encrypt to revoke “mis-issued” certificates appeared first on Malwarebytes Labs.
Supply a list of dorks and, optionally, one of the following: a user (-u) a file with a list of users (-uf) an organization (-org) a file with a list of organizations (-of) a repo (-r) You can also pass: an output directory to store resu…
 |
|
| This blog was authored by Ankur Saini and Hossein Jazi Lazarus Group is one of the most sophisticated North Korean APTs that has been active since 2009. The group is responsible for many high profile attacks in the past and has gained worldwide attention. The Malwarebytes Threat Intelligence team is actively monitoring its activities and…
Categories: Threat Intelligence |
The post North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign appeared first on Malwarebytes Labs.
There are three things you can be sure of in life: death, taxes – and new CVEs. For organizations that rely on CentOS 8, the inevitable has now happened, and it didn’t take long. Just two weeks after reaching the official end of life, something broke …
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of Banco do Brasil, Loja Integrada, Mercado Bitcoin, Mercado Livre, and Mercado Pago.
First doc…
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of Banco do Brasil, Loja Integrada, Mercado Bitcoin, Mercado Livre, and Mercado Pago.
First doc…
 |
|
| Ransomware attackers are starting to reach out to individuals whose data they have compromised in a breach, asking them to help get the compromised company to pay up.
Categories: Ransomware Tags: cisaDark Webexfiltrated dataidentity protectioninsider threatlockbitransomwareschool district |
The post Ransomware gangs are recruiting breached individuals to persuade companies to pay up appeared first on Malwarebytes Labs.
 |
|
| A researcher discovered a way to gain control of both webcams and any open session in Safari. How did they do it?
Categories: Exploits and vulnerabilities Tags: ApplemacOSpopupsafariURIurlUXSS |
The post Apple fixes Mac bug that could have allowed takeover of webcams and browser tabs appeared first on Malwarebytes Labs.
