Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a new PowerShell-based information stealer designed …

This New Stealthy JavaScript Loader Infecting Computers with Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors have been found using a previously undocumented JavaScript malware strain that functions as a loader to distribute an array of remote access Trojans (RATs) and information stealers. HP …

Warning — Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Attackers are actively making efforts to exploit a new variant of a recently disclosed privilege escalation vulnerability to potentially execute arbitrary code on fully-patched systems, once again demonstrating how adversaries …

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple security weaknesses have been disclosed in MediaTek system-on-chips (SoCs) that could have enabled a threat actor to elevate privileges and execute arbitrary code in the firmware of the audio …

Apple Sues Israel’s NSO Group for Spying on iPhone Users With Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple has sued NSO Group and its parent company Q Cyber Technologies in a U.S. federal court holding it accountable for illegally targeting users with its Pegasus surveillance tool, marking …

Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox

Blog WriterThe Hacker News - Original news source is thehackernews.com

A now-patched vulnerability affecting Oracle VM VirtualBox could be potentially exploited by an adversary to compromise the hypervisor and cause a denial-of-service (DoS) condition. “Easily exploitable vulnerability allows high privileged …