A Chrome 104 update announced by Google on Tuesday patches 11 vulnerabilities, including a zero-day that has been exploited in attacks.
Security Firms Find Over 20 Malicious PyPI Packages Designed for Data Theft
Security companies have identified more than 20 malicious PyPI packages designed to steal passwords and other sensitive information from the victims’ machines.
Critical Vulnerability in Google’s Titan M Chip Earns Researchers $75,000
Security researchers at Quarkslab have published detailed information on a critical vulnerability they discovered in Google’s Titan M chip earlier this year.
Introduced in 2018, Titan M is a system-on-a-chip (SoC) designed to deliver increased security protections to Pixel devices, including guaranteeing secure boot.
Ransomware Group Claims Access to SCADA in Confusing UK Water Company Hack
A ransomware group has hit at least one water company in the United Kingdom, but there is some confusion over whose systems were actually breached.
Signal Discloses Impact From Twilio Hack
Secure communications services provider Signal on Monday disclosed impact from the recent Twilio hack, after threat actors attempted to re-register the phone numbers of some of its users to new devices.
Zoom Patches Serious macOS App Vulnerabilities Disclosed at DEF CON
Zoom informed customers last week that macOS updates for the Zoom application patch two high-severity vulnerabilities. Details of the flaws were disclosed on Friday at the DEF CON conference in Las Vegas by macOS security researcher Patrick Wardle.
Cyber Firm Darktrace Shares Surge on Possible Takeover
Shares in British cyber security firm Darktrace soared almost a fifth Tuesday, reflecting a possible takeover worth several billion pounds by a US private equity firm.
Three Nigerian BEC Fraudsters Extradited From UK to US
Three Nigerians have been extradited from the United Kingdom to the United States to face charges in relation to their roles in business email compromise (BEC) fraud schemes, the US Department of Justice announced.
Microsoft Announces Disruption of Russian Espionage APT
Microsoft on Monday announced another major disruption of an APT actor believed to be linked to the Russian government, cutting off access to accounts used for pre-attack reconnaissance, phishing, and email harvesting.
Assange Lawyers Sue CIA for Spying on Them
Lawyers for WikiLeaks founder Julian Assange sued the US Central Intelligence Agency and its former director Mike Pompeo on Monday, alleging it recorded their conversations and copied data from their phones and computers.
