Security News

Attackers Exploit WhatsApp Flaw to Auto-Install Spyware
2019-05-14 12:33

Immediate App Updating Required to Protect Apple and Android Device UsersFacebook is warning users of its WhatsApp messaging app to update immediately to fix a flaw that is being used to remotely...

It's 2019 and a WhatsApp call can hack a phone: Zero-day exploit infects mobes with spyware
2019-05-14 01:18

Rap for surveillanceware chaps in chat app voice yap trap flap – now everyone patch A security flaw in WhatsApp can be, and has been, exploited to inject spyware into victims' smartphones: all a...

FIN7 Linked to Escalating Active Exploits for Microsoft SharePoint Bug
2019-05-10 21:29

Using a bug patched in March, the attacks are starting to ramp up worldwide.

Researchers: Spies Exploit Microsoft Exchange Backdoor
2019-05-08 16:48

Turla Cyber Espionage Group's 5-Year Campaign Hit Three Targets, ESET WarnsA sophisticated nation-state spy network has quietly exploited a backdoor in Microsoft Exchange servers that gave...

Oracle WebLogic Exploit-fest Continues with GandCrab Ransomware, XMRig
2019-05-06 20:04

Snowballing attacks using a recently patched critical bug show no sign of abating.

SAP's NetWeaver: New Exploits for Misconfigurations
2019-05-03 15:33

Researchers at Onapsis Say Attacks Could Focus on NetWeaver PlatformNew exploits released online that target long-known configuration weaknesses in SAP's NetWeaver platform could pose risks to...

Malware: The Evolution of Exploits and Defenses
2019-05-02 21:33

The good news is: The development of new malware exploits has slowed considerably. The bad news is: That's because the old ones still continue to work so effectively. Adam Kujawa of Malwarebytes...

PoC Exploits for Old SAP Configuration Flaws Increase Risk of Attacks
2019-05-02 15:37

Organizations using SAP business applications have been warned that the risk of attacks involving some old configuration issues has increased after researchers released proof-of-concept (PoC)...

50,000 companies running SAP installations open to attack via publicly released exploits
2019-05-02 13:21

Two exploits publicly released in late April at the OPCDE security conference in Dubai could be leveraged to compromise a great number of SAP implementations, Onapsis has warned. A successful...

Muhstik Botnet Exploits Recent Oracle WebLogic Vulnerability
2019-05-01 13:53

A recently observed variant of the Muhstik botnet is exploiting a recently disclosed Oracle WebLogic server vulnerability for cryptomining and distributed denial of service (DDoS) attacks. read more