Security researchers disclosed a new zero-day flaw in Apple’s macOS Finder that can allow attackers to run arbitrary commands on Macs
A zero-day flaw allows...
Security researchers uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries
Large phishing campaign targets EMEA and APAC governmentsSecurity Affairs
North Korea-linked APT group Kimsuky allegedly breached South Korea’s atomic research agency KAERI by exploiting a VPN vulnerability.
South Korean representatives declared on Friday that...
Experts attribute a series of cyber-espionage campaigns dating back to 2014, and focused on gathering military intelligence, to China-linked Unit 69010.
Experts from Recorded Future’s...
Pierluigi Paganini
Researchers from FireEye warn that China-linked APT groups continue to target Pulse Secure VPN devices to compromise networks.
https://securityaffairs.co/wordpress/118358/hacking/pulse-secure-vpn-china-apt.html
Pierluigi Paganini
Microsoft experts uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind SolarWinds hack.
https://securityaffairs.co/wordpress/118352/apt/spear-phishing-attacks-nobelium.html
Pierluigi Paganini
Researchers disclosed details about 13 vulnerabilities in the Nagios network monitoring application that could be exploited for malicious purposes.
https://securityaffairs.co/wordpress/118207/hacking/nagios-it-monitoring-flaws.html
ZACK BUDRYK
Some Kroger pharmacy customers’ data may have been stolen after hackers accessed a vendor’s file-transfer service, the grocery store chain said Friday.
https://thehill.com/policy/cybersecurity/539825-kroger-warns-pharmacy-customers-personal-data-may-have-been-stolen-in