A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers. […]
Category Archives: Security
Auto Added by WPeMatico
A Chinese hacking group tracked as StormBamboo has compromised an undisclosed internet service provider (ISP) to poison automatic software updates with malware. […]
The U.S. Department of Justice has filed a lawsuit against social media platform TikTok and its parent company, ByteDance, alleging widespread violations of children’s privacy laws. […]
A Facebook malvertising campaign targets users searching for AI image editing tools and steals their credentials by tricking them into installing fake apps that mimic legitimate software. […]
U.S. and German law enforcement seized the domain of the crypto wallet platform Cryptonator, used by ransomware gangs, darknet marketplaces, and other illicit services, and indicted its operator. […]
Privacy-focused search engine DuckDuckGo has been blocked in Indonesia by its government after citizens reportedly complained about pornographic and online gambling content in its search results. […]
Alexander Vinnik, Alsu Kurmasheva, BTC-e, Evan Gershkovich, German Moyzhes, Ivan Ermakov, Krebs, Maxim Marchenko, Mt. Gox, Ne'er-Do-Well News, News, Paul Whelan, ransomware, Roman Seleznev, Russia's War on Ukraine, Security, trickbot, Vadim Krasikov, Vladimir Putin, Vladislav Klyushin
U.S. Trades Cybercriminals to Russia in Prisoner Swap
Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were several convicted cybercriminals. In return, Russia has reportedly released 16 prisoners, including Wall Street Journal reporter Evan Gershkovich and ex-U.S. Marine Paul Whelan. Among the more notable Russian hackers released in the prisoner swap […]
Twilio has finally killed off its Authy for Desktop application, forcibly logging users out of the desktop application. […]
Threat actors uploaded malicious Python packages to the PyPI repository and promoted them through the StackExchange online question and answer platform. […]
Researchers are warning of threat actors increasingly abusing the Cloudflare Tunnel service in malware campaigns that usually deliver remote access trojans (RATs). […]