ViperSoftX campaign steals cryptocurrency and targets password managers
Security experts have discovered a new version of ViperSoftX, a malware that steals cryptocurrency and targets password managers, such as KeePass and 1Password.
Password Management
LastPass provides an update on security breach
LastPass has provided an update on a security breach of internal source code and sensitive documents previously disclosed this past August.
Cybercriminals use proxies and configurations to launch credential stuffing attacks
The Federal Bureau of Investigation (FBI) have spotted cybercriminals using proxies and configurations to launch credential stuffing attacks against US companies.
GitLab issues security update for Critical hard-coded password vulnerability (CVE-2022-1162)
GitLab has issued a security update to address a Critical vulnerability CVE-2022-1162 where static passwords were inadvertently set during OmniAuth-based registration.
FluBot: Beware of this Android password-stealing malware
Security experts from UK’s National Cyber Security Centre (NCSC) warned of a new malware strain FlyBot, an Andoid password-stealing malware.
PHP user database leak allegedly led to PHP source code compromise
PHP maintainer Nikita Popov has published new details regarding the likely cause of a recent PHP source code compromise and insert of malicious code.
Hackers target 50K vulnerable Fortinet devices to steal passwords
Cybersecurity experts are warning hackers are targeting nearly 50,000 vulnerable unpatched Fortinet VPNs to steal passwords.
Mozilla releases Firefox 78 with new ‘Protections Dashboard’ feature
The Mozilla Foundation has released Firefox 78 that includes security fixes for multiple vulnerabilities, as well as a new ‘Protections Dashboard’ feature.
FBI and CISA warning of Chinese targeting COVID-19 research organizations
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) issued a warning of likely targeting and compromise of U.S. COVID-19 research organizations by the People’s Republic of China (PRC).
Alert: Threat actors continue to exploit patched Pulse Secure VPN devices
Organizations that are running Pulse Security VPN devices may still be at risk of being exploited, even if previously patched, according to a new Department of Homeland Security (DHS) advisory. The risk is elevated if an actor previously exploited CVE-2019-11510 and stole AD credentials from the victim organization.