Microsoft Releases Out-of-Band Update for Kerberos Authentication Issues
The issue is related to the PerformTicketSignature registry subkey value in CVE-2020-17049, a security feature bypass bug in Kerberos KDC that Microsoft fixed in November 2020 Patch Tuesday.
New WAPDropper malware abuses Android devices for WAP fraud
Security researchers have detected a new strain of Android malware being currently distributed in the wild, primarily targeting users located in Southeast Asia via WAP billing fraud.
Researcher discovers flaws in websites of loan lead generation companies
US-based software engineer Kevin Traver found two large groups of short-term loan websites that were giving up sensitive personal information via separate vulnerabilities.
Egregor: A Ransomware on the Rise
/https://cyware-ent.s3.amazonaws.com/image_bank/8edc_shutterstock_662707930.jpg "Egregor: A Ransomware on the Rise - Cybersecurity news - Malware and Vulnerabilities")
Within a short span of its discovery, the Egregor ransomware has been linked to alleged attacks against organizations such as GEFCO, Crytek, Ubisoft, and Barnes & Noble, with the latest being Cencosud.
Mount Locker Ransomware Targets U.S. Taxpayers
/https://cyware-ent.s3.amazonaws.com/image_bank/shutterstock_414088366.jpg "Mount Locker Ransomware Targets U.S. Taxpayers - Cybersecurity news - Malware and Vulnerabilities")
As we approach the U.S. tax season, security experts are warning about Mount Locker ransomware actors who are prepping their attacks to specifically target users of the TurboTax software.
New Malware Compromises WordPress Sites and Installs Scam Online Stores
A new gang has been taking over vulnerable WordPress sites to install hidden e-commerce stores with the purpose of hijacking the site's search engine ranking and reputation and promote online scams.
Critical Unpatched VMware Flaw Affects Multiple Corporates Products
VMware has released temporary workarounds to address a critical vulnerability in its products that could be exploited by an attacker to take control of an affected system.
Security Researchers Sound Alarm on Smart Doorbells
A recent review by the NCC Group and Which? of nearly a dozen inexpensive video doorbells sold via online markets such as Amazon and eBay uncovered multiple security vulnerabilities in each device.
Ransomware gangs hunt for tax software to ratchet up pressure on victims
Jamie Hart, a cyber threat intelligence analyst at Digital Shadows, said that the trend of targeting individual and business tax filings for ransomware attacks has been on the rise.
This Bluetooth Attack Can Steal a Tesla Model X in Minutes
A hacker could rewrite the firmware of a Tesla key fob via Bluetooth connection, lift an unlock code from the fob, and use it to steal a Model X in just a matter of minutes.
