alt=A spider on a computer screen, indicating the presence of malware.

2023-12-20 Post a Comment

New Malvertising Campaign Distributing PikaBot Disguised as Popular Software

The malware loader known as PikaBot is being distributed as part of aÂ malvertisingÂ campaignÂ targeting users searching for legitimate software like AnyDesk. “PikaBot was previously only distributed via malspam campaigns similarly to QakBot and emerged as one of the preferred payloads for a threat actor known as TA577,” Malwarebytes’ JÃ©rÃ´me SeguraÂ said. The malware family, whichÂ firstÂ appearedÂ in early 2023, consists of a loader and a core module that allows it to operate as a […]

alt=An hourglass with sand flowing through it against a beautiful sunset backdrop.

Cyber security

2023-12-20 Post a Comment

When Windows 10 support runs out, you have 5 options

When Windows 10 support runs out, you have 5 options but only 2 are worth considering Microsoft will officially end support for its most popular operating system in October 2025. Here’s what you should do with your Windows 10 PCs before that day arrives. Written byÂ Ed Bott,Â Senior Contributing EditorDec. 18, 2023 at 1:49 a.m. PT In less than two years, Microsoft will draw theÂ final curtain on Windows 10Â after a successful […]

Cyber security

2023-12-12 Post a Comment

LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove

ByÂ Roshan Ashraf Shaikh Computers running Windows or Linux are vulnerable to a new type of firmware attack called LogoFAIL, according to a report fromÂ Ars Technica. This attack has proven to be extremely effective because it rewrites the logo that typically appears when the system boots after a successful POST (hence the name, “LogoFAIL”), which is early enough that it can bypassÂ securityÂ measures designed to prevent bootkit attacks. The issue affects any […]

Cyber security

2023-12-12 Post a Comment

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

A critical new bluetooth flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS devices. Tracked asÂ CVE-2023-45866, the issue relates to a case of authentication bypass that enables attackers to connect to susceptible devices and inject keystrokes to achieve code execution as the victim. “Multiple Bluetooth stacks have authentication bypass vulnerabilities that permit an attacker to connect to a discoverable host without user confirmation […]

Cyber security

2023-12-12 Post a Comment

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin

By: SERGIU GATLAN. A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable websites. Known asÂ Backup Migration, the plugin helps admins automate site backups to local storage or a Google Drive account. The security bug (tracked asÂ CVE-2023-6553Â and rated with aÂ 9.8/10Â severity score) was discovered by a team of bug hunters known asÂ Nex Team, who reported it to […]