The reduction in memory-related vulnerabilities in Android over the past five years is attributed to Google’s secure-by-design approach. This strategy emphasizes the use of memory-safe languages like Rust for new code development. Currently, memory safety issues make up only 24% …
Memory-Safe Code Adoption Has Made Android Safer Read More »
103 Google has introduced a new feature that allows users to sync their Passkeys using the Google Password Manager, enabling quick and easy access across multiple devices. This update aims to streamline the process of accessing and utilizing Passkeys on …
Google Launches Passkeys Sync With Google Password Manager Read More »
î ‚Sep 24, 2024î „Ravie LakshmananMobile Security / Malware Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious …
Necro Android Malware Found in Popular Camera and Browser Apps on Play Store Read More »
In a strategic move to enhance security measures, Microsoft has successfully removed over 730,000 redundant applications and deactivated 5.75 million inactive tenants within its cloud infrastructure as part of the expansive Secure Future Initiative (SFI). This initiative was launched following …
70 Users of macOS Sequoia are experiencing difficulties with networking tools such as VPNs and EDRs after the latest update. This interference has led to SSL failures and connection issues with various security tools like CrowdStrike Falcon and ESET EDR. …
macOS Sequoia Interferes With VPNs And EDRs Following Update Read More »
A hacktivist group known as Twelve has been using publicly available tools to carry out destructive cyber attacks against Russian targets. Instead of demanding a ransom for decrypting data, Twelve encrypts victims’ data and destroys their infrastructure to prevent recovery, …
Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks Read More »
Less than two weeks after addressing one vulnerability, Ivanti has revealed that a critical Cloud Services Appliance (CSA) flaw is currently being exploited in the wild as of Sept. 19. The vulnerability (CVE-2024-8963, CVSS 9.4) is a path traversal issue …
Ivanti’s Cloud Service Attacked via Second Vuln Read More »
61 Following a busy week, Transport for London appears to be recovering from a recent cyberattack. The service has initiated password resets for thousands of employees as part of its response to the cybersecurity incident. Impact of the Cyberattack on …
Transport for London Cyberattack: Passwords Reset; Teen Arrested Read More »
Cybersecurity experts have recently discovered a new botnet made up of small office/home office (SOHO) and IoT devices, believed to be controlled by a Chinese state-sponsored threat group known as Flax Typhoon (also known as Ethereal Panda or RedJuliett). Named …
New “Raptor Train” IoT Botnet Compromises Over 200,000 Devices Worldwide Read More »
A series of critical, medium, and low-severity vulnerabilities in macOS were exploited through a zero-click chain, potentially compromising iCloud data and undermining the security reputation of macOS. The exploit began with a flaw in the handling of files attached to …
Zero-Click RCE Bug in macOS Calendar Exposes iCloud Data Read More »
