Security Bulletin

According to ESET researchers who discovered the campaign, the malware, which they named NGate, mimicked legitimate banking apps, convincing victims to download a malicious app via phishing messages that claimed their devices were compromised.

The vulnerability, tagged as CVE-2021-44228, was first reported in November 2021 and led to a global scramble to implement patches. Despite these efforts, the flaw remains a persistent threat due to complex software dependencies that hinder...

The flaw affects all versions of the plugin up to 6.3.0.1 and allows attackers to escalate privileges without authentication, giving them the ability to create rogue administrator accounts.

The flaw, tracked as CVE-2024-20399 with a CVSS score of 6.0, allows attackers with valid admin credentials to bypass the NX-OS command line interface and execute arbitrary commands on the underlying Linux OS.

GenAI still needs time to mature, but teams can try it out in many security areas, including email, identity, reporting, and enhanced assistants.

A recently launched attack from North Korea is giving researchers an inside look to how the regime’s hackers operate.

Users could reportedly access data from private channels by instructing the AI to deliver a phishing link.

The malware builds on a near-field communication tool in combination with phishing and social engineering to steal cash.

The guidance is part of a coordinated, global effort to eradicate living-off-the-land techniques used against critical infrastructure.

Ironically, Macs' lower risk profile may make them more susceptible to any given threat than the average Windows or Linux system.

New Chrome release set to roll out over the next few days addresses 38 security issues in the browser.