Apple released on Monday security updates for OS X, iOS, watchOS, tvOS, Safari, iTunes and iCloud to address tens of vulnerabilities identified by the company’s employees and external researchers.
read more
Lurk Banking Trojan Delivered via Ammyy Website
Cybercriminals breached the official website of the popular remote administration tool Ammyy Admin and leveraged it to deliver Lurk and other pieces of malware, researchers at Kaspersky Lab reported on Monday.
read more
Ransomware Operators Show Reputable “Customer” Service
Cybercrime, we are told, is becoming increasingly professional — it is being run like a business. If this is true, then selling ransomware decryption keys is almost the perfect business model. It has low start-up costs; is free from both corporation tax and regulators via bitcoin payments and Tor communication channels; it is repeatable business; and it fulfills a strong customer need.
read more
Many Fitness Trackers Leak Personal Data: Study
Security weaknesses on many popular fitness trackers may allow hackers to access or potentially manipulate user data, a study showed Monday.
read more
Little Snitch Flaw Exposed Mac Systems to Attacks
A serious vulnerability in the Mac OS X firewall Little Snitch could have been exploited by hackers to gain root privileges on a system or execute arbitrary code in the context of the kernel.
read more
SFG Malware Isn’t Going After Your Grid, but After Your Money
SFG, the Furtim-related piece of malware that was said last week to be specifically targeting “at least one European energy company,” might have no special interest in the energy sector after all, but is instead more focused on evasion and on stealing passwords and money.
read more
CryptXXX Now Being Distributed via Spam Emails
CryptXXX, one of the most prevalent ransomware variants out there, is now leveraging spam emails for distribution, researchers at Proofpoint warn.
read more
Malicious Pokémon GO Apps Land in Google Play
The Pokémon GO hype isn’t over, and more cybercriminals are taking advantage of it. After a malware-riddled Pokémon GO app emerged over a week ago, researchers have also found a fake lockscreen app in Google Play under the name of Pokemon Go Ultimate.
read more
Phone Verification Abused to Steal Money From Tech Giants
A researcher has demonstrated how malicious hackers could have stolen significant amounts of money from Google, Microsoft and Facebook by leveraging flaws in how these companies implemented their phone-based verification services.
read more
User Data Stolen in Ubuntu Forums Breach
Canonical informed users on Friday that the Ubuntu Forums website was breached after a hacker exploited a known vulnerability in one of the add-ons installed on the vBulletin-powered site.
read more
