Malware and Vulnerabilities

A vulnerability in MobileIron mobile device management applications is used by state-backed hackers and organized crime warns the safety bureau. State-backed hackers and criminal gangs are now actively utilizing a vulnerability in mobile device management (MDM) applications to successfully get...

New WAPDropper malware signals users up to premium services supplied from telecoms from Thailand and Malaysia. Security researchers have discovered a new breed of Android malware has been now dispersed in the wild, mostly targeting users situated in Southeast Asia. Launched...

TikTok has patched a reflected XSS security defect along with a bug leading into account takeover affecting the company's domain. As reported via the Bug bounty platform system HackerOne by writer Muhammed"Milly" Taskiran, the initial exposure relates to a URL...

Chinese state-sponsored attackers are working a significant worldwide campaign against several verticals harnessing the Zerologon vulnerability, based on a new study from Symantec. APT10 is well known to investigators, having been unmasked as the thing behind the notorious Cloud Hopper...

Magecart Version has Shifted and You Ought to be Attentive, warns RiskIQ A new offshoot of this Grelos card-skimming malware - a more standard Magecart version - is doing the rounds, based on infosec biz RiskIQ. A special cookie linked to...