Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. “There are indications …

Mozilla Begins Rolling Out ‘Site Isolation’ Security Feature to Firefox Browser

Blog WriterThe Hacker News - Original news source is thehackernews.com

Mozilla has begun rolling out a new security feature for its Firefox browser in nightly and beta channels that aims to protect users against a new class of side-channel attacks from malicious sites. Called “Site Isolation,” the implementation loads each …

A Simple 1-Click Compromised Password Reset Feature Coming to Chrome Browser

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Tuesday announced a new feature to its password manager that could be used to change a stolen password automatically with a single tap. Automated password changes build on the tool’s ability to check the safety of saved passwords. Thus when Chrome finds …

How Apple Gave Chinese Government Access to iCloud Data and Censored Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

In July 2018, when Guizhou-Cloud Big Data (GCBD) agreed to a deal with state-owned telco China Telecom to move iCloud data belonging to Apple’s China-based users to the latter’s servers, the shift raised concerns that it could make user data vulnerable to …

Experts Reveal Over 150 Ways to Steal Control of 58 Android Stalkerware Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

A total of 158 privacy and security issues have been identified in 58 Android stalkware apps from various vendors that could enable a malicious actor to take control of a victim’s device, hijack a stalker’s account, intercept data, achieve remote …

Free “vCISO Clinic” offers Resource-Constrained InfoSec Leaders a Helping Hand

Blog WriterThe Hacker News - Original news source is thehackernews.com

Leaders in the InfoSec field face a strange dilemma. On the one hand, there are hundreds of thousands of resources available to find online to read (or watch) if they have questions – that’s a benefit of a digital-first field. …

70 European and South American Banks Under Attack By Bizarro Banking Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially motivated cybercrime gang has unleashed a previously undocumented banking trojan, which can steal credentials from customers of 70 banks located in various European and South American countries. Dubbed “Bizarro” by Kaspersky researchers, the Windows malware is “using affiliates …

Apple’s Find My Network Can be Abused to Exfiltrate Data From Nearby Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Latest research has demonstrated a new exploit that enables arbitrary data to be uploaded from devices that are not connected to the Internet by simply sending “Find My Bluetooth” broadcasts to nearby Apple devices. “It’s possible to upload arbitrary data …

Why Password Hygiene Needs a Reboot

Blog WriterThe Hacker News - Original news source is thehackernews.com

In today’s digital world, password security is more important than ever. While biometrics, one-time passwords (OTP), and other emerging forms of authentication are often touted as replacements to the traditional password, today, this concept is more marketing hype than anything …

Experts Warn About Ongoing AutoHotkey-Based Malware Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different …