Page 9 - Software Vulnerability News Today

Iranian Hackers Utilize ScreenConnect to Spy On UAE, Kuwait Government Agencies UAE and Kuwait government agencies are targets of a new cyberespionage campaign potentially carried out by Iranian threat actors, according to new research. Attributing the operation to be the work of Static Kitten (aka MERCURY or MuddyWater), Anomali said the "objective of this activity is to install a remote management tool called ScreenConnect (acquired by ConnectWise 2015) with unique launch parameters that hav...

Poor Password Security and Outdated Systems Poor Password Security Lead to the Recent Water Treatment Facility Hack

Ukraine Law enforcement shut down U-Admin, one of the world's largest phishing services and arrested its author.

Top 5 Bug Bounty Platforms to Watch in 2021 While Gartner does not have a dedicated Magic Quadrant for Bug Bounties or Crowd Security Testing yet, Gartner Peer Insights already lists 24 vendors in the "Application Crowdtesting Services" category. We have compiled the top 5 most promising bug bounty platforms for those of you who are looking to enhance your existing software testing arsenal with knowledge and expertise from international security researchers: 1. HackerOne Being a unicorn backed...

New Attack Could Let Remote Hackers Target Devices On Internal Networks A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research. Detailed by enterprise IoT security firm Armis, the new attack (CVE-2020-16043 and CVE-2021-23961) builds on the previously disclosed technique to bypass routers and firewalls and reach any unmanaged device within the internal network from the Internet. First ...

North Korea hackers targeted security researchers working on vulnerability research and development.

Researchers Find MrbMiner Crypto-Mining Malware Linked to Iranian Software Company

Europol and German Authorities Take Down World's Largest Illegal Dark Web Marketplace

Attackers Used SUNSPOT Malware to Compromise SolarWinds Systems and Inject Backdoor

Warning — 5 New Trojanized Android Apps Spying On Users In Pakistan Designed to masquerade apps such as the Pakistan Citizen Portal, a Muslim prayer-clock app called Pakistan Salat Time, Registered SIMs Checker, and TPL Insurance, the malicious variants have been found to obfuscate their operations to stealthily download a payload in the form of an Android Dalvik executable (DEX) file. "The DEX payload contains most of the malicious features, which include the ability to covertly exfiltra...