Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such …

New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads

Blog WriterThe Hacker News - Original news source is thehackernews.com

Users searching for TeamViewer remote desktop software on search engines like Google are being redirected to malicious links that drop ZLoader malware onto their systems while simultaneously embracing a stealthier infection chain …

Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 to fix two actively exploited vulnerabilities, one of which defeated extra security protections built into the operating system. The …

Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers on Monday took the wraps off a newly discovered Linux and Windows re-implementation of Cobalt Strike Beacon that’s actively set its sights on government, telecommunications, information technology, and financial institutions in …

Critical Bug Reported in NPM Package With Millions of Downloads Weekly

Blog WriterThe Hacker News - Original news source is thehackernews.com

A widely used NPM package called ‘Pac-Resolver’ for the JavaScript programming language has been remediated with a fix for a high-severity remote code execution vulnerability that could be abused to …

New SpookJS Attack Bypasses Google Chrome’s Site Isolation Protection

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly discovered side-channel attack demonstrated on modern processors can be weaponized to successfully overcome Site Isolation protections weaved into Google Chrome and Chromium browsers and leak sensitive data in a Spectre-style speculative execution attack. …