Tag: threats

  • Microsoft Security Blog: 3 priorities for adopting proactive identity and access security in 2025

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/28/3-priorities-for-adopting-proactive-identity-and-access-security-in-2025/ Source: Microsoft Security Blog Title: 3 priorities for adopting proactive identity and access security in 2025 Feedly Summary: Adopting proactive defensive measures is the only way to get ahead of determined efforts to compromise identities and gain access to your environment. The post 3 priorities for adopting proactive identity and access security…

  • Slashdot: iOS App Store Apps With Screenshot-Reading Malware Found For the First Time

    Source URL: https://it.slashdot.org/story/25/02/05/2010251/ios-app-store-apps-with-screenshot-reading-malware-found-for-the-first-time?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: iOS App Store Apps With Screenshot-Reading Malware Found For the First Time Feedly Summary: AI Summary and Description: Yes Summary: The discovery of “SparkCat” malware infiltrating iOS and Android apps marks a significant breach of security, being the first to implement malicious screenshot-reading capabilities in Apple’s App Store. This…

  • Hacker News: OCR Crypto Stealers in Google Play and App Store

    Source URL: https://securelist.com/sparkcat-stealer-in-app-store-and-google-play/115385/ Source: Hacker News Title: OCR Crypto Stealers in Google Play and App Store Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a cybersecurity threat involving a malware campaign known as “SparkCat,” which targets Android and iOS devices by embedding malicious SDKs in popular apps to steal sensitive information,…

  • Slashdot: First OCR Spyware Breaches Both Apple and Google App Stores To Steal Crypto Wallet Phrases

    Source URL: https://it.slashdot.org/story/25/02/05/1826259/first-ocr-spyware-breaches-both-apple-and-google-app-stores-to-steal-crypto-wallet-phrases?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: First OCR Spyware Breaches Both Apple and Google App Stores To Steal Crypto Wallet Phrases Feedly Summary: AI Summary and Description: Yes **Summary:** Researchers from Kaspersky have identified new malware named “SparkCat” that exploits optical character recognition (OCR) technology to extract cryptocurrency wallet recovery phrases from users’ photo galleries…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/05/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to…

  • The Register: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

    Source URL: https://www.theregister.com/2025/02/05/netgear_fixes_critical_bugs_while/ Source: The Register Title: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge Feedly Summary: International security squads all focus on stopping baddies busting in through routers, IoT kit etc Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.… AI…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/04/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-19410 Paessler PRTG Network…

  • The Register: Los Alamos lab to research next-gen chip technologies

    Source URL: https://www.theregister.com/2025/02/05/los_alamos_lab_to_research/ Source: The Register Title: Los Alamos lab to research next-gen chip technologies Feedly Summary: Radiation-hardening for space environments and energy efficiency tweaks for above and below Los Alamos National Laboratory (LANL) is leading a project to transform how chips are designed and manufactured, to make them more energy efficient and able to…