Summary

Total Articles Found: 14

Top sources:

Top Keywords:

Top Authors

Top Articles:

  • North Korean .Gov Hackers Back With Fake Pen-Test Company
  • Apple Adds 'BlastDoor' to Secure iPhones From Zero-Click Attacks
  • Adobe: Critical Flaws in Reader, Acrobat, Illustrator
  • Google Warns of Exploited Zero-Days in Chrome Browser
  • Project Zero Flags High-Risk Zoom Security Flaw
  • Adobe Patches Gaping Security Holes in Acrobat, Reader, Photoshop
  • Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage
  • Software Supply Chain Weakness: Snyk Warns of 'Deliberate Sabotage' of NPM Ecosystem
  • GitHub Confirms Another Major NPM Security Defect
  • Researchers Spot Supply Chain Attack Targeting GitLab CI Pipelines

Report: L3 Emerges as Suitor for Embattled NSO Group

πŸ€–: "Spy game 😏"

L3 Technologies, a U.S. government contractor that sells aerospace and defense technology, has emerged as a suitor for Israeli exploit merchant NSO Group. read more

...more

Researchers Spot Supply Chain Attack Targeting GitLab CI Pipelines

Published: 2022-05-19 17:35:51

Popularity: 13

Author: Ryan Naraine

Keywords:

  • NEWS & INDUSTRY
  • Vulnerabilities
  • Security researchers at SentinelLabs are calling attention to a software chain supply attack targeting Rust developers with malware aimed directly at infecting GitLab Continuous Integration (CI) pipelines. read more

    ...more

    Adobe Patches Gaping Security Holes in Acrobat, Reader, Photoshop

    πŸ€–: "security alert"

    Adobe's security update engine revved into overdrive this month with the release of patches for at least 78 documented software vulnerabilities, some serious enough to expose corporate customers to remote code execution attacks. read more

    ...more

    Software Supply Chain Weakness: Snyk Warns of 'Deliberate Sabotage' of NPM Ecosystem

    Software supply chain security fears escalated again this week with the discovery of what’s being described as "deliberate sabotage" of code in the open-source npm package manager ecosystem. read more

    ...more

    Project Zero Flags High-Risk Zoom Security Flaw

    Video conferencing software giant Zoom has shipped patches for a pair of security defects that expose Windows, macOS, Linux, iOS and Android users to malicious hacker attacks. read more

    ...more

    GitHub Confirms Another Major NPM Security Defect

    Microsoft-owned GitHub is again flagging major security problems in the npm registry, warning that a pair of newly discovered vulnerabilities continue to expose the soft underbelly of the open-source software supply chain. read more

    ...more

    Akamai to Acquire Guardicore in $600M Zero Trust Tech Deal

    Edge security and content delivery giant Akamai Technologies on Wednesday announced plans to spend $600 million to acquire Guardicore, an Israeli micro-segmentation technology startup. Akamai said the deal would add new capabilities to help customers thwart ransomware attacks by blocking the spread of malware within an already-compromised enterprise. read more

    ...more

    Apple Confirms New Zero-Day Attacks on Older iPhones

    Apple on Thursday confirmed a new zero-day exploit hitting older iPhones and warned that the security vulnerability also affects the macOS Catalina platform. read more

    ...more

    Google Warns of Exploited Zero-Days in Chrome Browser

    πŸ€–: "Zero Day Alert"

    Google has joined the list of major software providers scrambling to respond to zero-day exploits in the wild. read more

    ...more

    Adobe Plugs Critical Photoshop Security Flaws

    πŸ€–: "Photoshop fail"

    Adobe has issued a warning for a pair of major security vulnerabilities affecting its popular Photoshop image manipulation software. The flaws, rated critical, expose both Windows and MacOS users to code execution attacks, Adobe said in an advisory released Tuesday. read more

    ...more

    Adobe: Critical Flaws in Reader, Acrobat, Illustrator

    πŸ€–: "Crashing software"

    Adobe has issued multiple security advisories with patches for critical vulnerabilities in a wide range of software products, including the ever-present Adobe Acrobat and Reader application. read more

    ...more

    North Korean .Gov Hackers Back With Fake Pen-Test Company

    A North Korean government-backed APT group has been caught using a fake pen-testing company and a range of sock puppet social media accounts in an escalation of a hacking campaign targeting security research professionals. read more

    ...more

    Apple Adds 'BlastDoor' to Secure iPhones From Zero-Click Attacks

    Published: 2021-01-28 20:31:16

    Popularity: 70

    Author: Ryan Naraine

    Keywords:

  • Mobile Security
  • NEWS & INDUSTRY
  • Vulnerabilities
  • Apple has quietly added several anti-exploit mitigations into its flagship mobile operating system in what appears to be a specific response to zero-click iMessage attacks observed in the wild. read more

    ...more

    Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage

    Published: 2024-09-05 18:41:02

    Popularity: 21

    Author: Ryan Naraine

    Keywords:

  • Cyberwarfare
  • Nation-State
  • Featured
  • GRU 29155
  • HermeticWiper
  • Russia
  • Ukraine
  • whispergate
  • πŸ€–: ""Spy Game""

    A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage appeared first on SecurityWeek.

    ...more

    end