Discover

Microsoft on Tuesday said that some of the source code was accessed by the SolarWinds hackers but there is no proof that they have abused the internal systems which could target other companies

A credential stealer malware known for targeting windows system has come back with a new phishing campaign that targets Microsoft Outlook and chrome users for stealing their credentials. This malware uses the compiled HTML file format to start the infection said the researchers from CISCO Talos

The vulnerabilities were found in windows defender which comes preinstalled with every copy of windows. This vulnerability could have let attackers carry out sophisticated attacks by enabling malicious escalation of privileges

The hackers have stolen over 100 million USD worth of cryptocurrency from celebrities. The organized takedown of hackers has been done by Europol’s European cybercrime Centre (EC3).

EMSISOFT an antivirus firm revealed a breach in their internal system. The system was used to evaluate and benchmark possible solutions relating to the storage and management of the log data generated by their products and services

The patch for February from Microsoft has been released and it has fixes for 56 vulnerabilities. Out of these 56, 11 are considered as critical, 43 as important and 2 as moderate

The vulnerability was discovered by a security researcher Polle Vanhoof. This is possible because some of the machines in Europe uses an insecure smart card payment method. The researchers also show how to clone and manipulate MIFARE Classic smart card systems

The security flaws were reported by an Israelian security firm Vdoo. These vulnerabilities could have let attackers gain root access and take complete control of the device’s wireless communication

The flaw was first reported to google by Mattias Buelens. A patch has been released by Google for a zero-day vulnerability that was under active exploit. These updates are available for Windows, Mac and Linux devises

Researchers from Armorblox have identified that Google Firebase used to steal credential to bypass Microsoft office 365 email security measures. Invoice-teamed emails were sent to more than 20000 inboxes

US and Bulgarian law enforcement agencies take down the site used by Nightwalker ransomware. In connection with the takedown, they have also charged a Canadian national for extorting $27.6 million in cryptocurrency from ransom payments

US Cellular one of the largest cellulars in the US based in Chicago with over 5 million customers informed to its customers that their data and numbers could have been ported due to a cybersecurity breach

Apple released an update on Thursday for iOS, iPad, and tvOS which fixes three vulnerabilities that are exploited in the wild. These vulnerabilities could have let attackers elevate privileges and achieve remote code execution

Law enforcement agencies of 8 countries take down email-based windows malware Emotet. The operation is dubbed as “Operation Ladybird”. The U. K’s National Crime Agency said that it nearly took 2 years to map the infrastructure of Emotet

An IT security researcher Ashley king discovered a vulnerability which is affecting nearly 100 million users. The vulnerability lets an attacker send a malicious link which when clicked by a victim opens the Shazam app to execute the malware which sends the location of the user to the attacker

A vulnerability was discovered by a security researcher Readlmode Labs. The first vulnerabilities let attackers send malicious e-books and the second allows a code execution and the third escalates the privileges and run the code as the root user