June 18, 2022

New MaliBot Android Banking Malware Spreads as a Crypto Miner Cybersecurity researchers have discovered a new Android banking malware named MaliBot, which poses as a cryptocurrency mining app or the Chrome web browser to target users in Italy and Spain. MaliBot focuses on stealing financial information such as e-banking service Read more…

730K WordPress Sites Force-updated to Patch Critical Plugin Bug WordPress sites using Ninja Forms, a forms builder plugin with more than 1 million installations, have been force-updated en masse this week to a new build that addresses a critical security vulnerability likely exploited in the wild. The vulnerability is a Read more…

Anker Eufy Smart Home Hubs Exposed to RCE Attacks by Critical Flaw Anker’s central smart home device hub, Eufy Homebase 2, was vulnerable to three vulnerabilities, one of which is a critical remote code execution (RCE) flaw. Homebase 2 is the video storage and networking gateway for all Anker’s Eufy Read more…

New Cloud-based Microsoft Defender for Home now Generally Available Microsoft has announced today the general availability of Microsoft Defender for Individuals, the company’s new security solution for personal phones and computers. This new cross-device security solution is available for all Microsoft 365 customers with Personal ($6.99/month) or Family ($9.99/month) subscriptions Read more…

MetaMask, Phantom Warn of Flaw that could Steal your Crypto Wallets MetaMask and Phantom are warning of a new ‘Demonic’ vulnerability that could expose a crypto wallet’s secret recovery phrase, allowing attackers to steal NFTs and cryptocurrency stored within it. Recovery phrases, otherwise known as “seeds,” are a series of words Read more…

Microsoft Office 365 Feature can Help Cloud Ransomware Attacks Security researchers are warning that threat actors could hijack Office 365 accounts to encrypt for a ransom the files stored in SharePoint and OneDrive services that companies use for cloud-based collaboration, document management and storage. A ransomware attack targeting files on these services could Read more…

Hackers Exploit Three-year-old Telerik Flaws to Deploy Cobalt Strike A threat actor known as ‘Blue Mockingbird’ targets Telerik UI vulnerabilities to compromise servers, install Cobalt Strike beacons, and mine Monero by hijacking system resources. The flaw leveraged by the attacker is CVE-2019-18935, a critical severity (CVSS v3.1: 9.8) deserialization that leads to Read more…