Recent findings by CloudSEK reveal the MALFEX campaign, which has leveraged compromised npm packages to deploy a remote access trojan known as Overlord RAT, targeting critical user data and Windows systems. This long-term supply chain attack has seen malicious npm packages used to install a RAT that enables attackers to…
Urgent Security Update for Git Clients: Developers Urged to Act Following Critical Vulnerability Discovery A significant security vulnerability has been identified in the open source Git code-repository software and associated tools like GitHub, impacting users on Mac OS X and Windows platforms. Software developers utilizing these systems are strongly advised…
Researchers have uncovered a sophisticated tech support scam being propagated through Google ads, which effectively freeze screens on both Windows and Mac devices. This malicious tactic prompts users with alarming messages urging them to contact a fraudulent call center for assistance. The advertisements have permeated numerous high-traffic websites, including those…
Microsoft Addresses Long-Standing ‘JasBug’ Vulnerability in Windows Systems Recently, Microsoft released a critical security patch addressing a substantial 15-year-old vulnerability dubbed ‘JasBug,’ which has the potential to be exploited by cybercriminals seeking to gain remote control over PCs equipped with any supported version of the Windows operating system. The vulnerability…
On Tuesday, Microsoft issued a patch addressing a significant security vulnerability that could empower cybercriminals to bypass essential protective measures across all Windows operating system versions, ranging from Windows XP to Windows 10, by merely altering a single bit. The flaw, classified as a local privilege escalation vulnerability (CVE-2015-0057), poses…
A serious security vulnerability has been addressed in Samba, an open-source software suite integral for Windows interoperability on Linux and Unix systems. This flaw poses significant risks, as it could enable hackers to execute arbitrary code remotely within the Samba daemon, known as smbd. The vulnerability has been classified under…
Critical Security Update for Windows Operating Systems Released Amidst Major Vulnerability Discovery On May 8, 2017, Microsoft issued an urgent security update to address a severe remote code execution (RCE) vulnerability found within its Microsoft Malware Protection Engine (MMPE). This vulnerability impacts a wide range of systems, including Windows 7,…
Microsoft Issues Urgent Patch Addressing Critical NTLM Vulnerabilities In a significant update released during this month’s Patch Tuesday, Microsoft has addressed critical vulnerabilities impacting the NT LAN Manager (NTLM) security protocol, which affects all versions of Windows operating systems in enterprises since 2007. This security breach raises alarms among system…
BlueBorne Vulnerability Poses Significant Threat to Bluetooth Devices Recent security revelations indicate that users of Bluetooth-enabled devices—ranging from smartphones and laptops to smart TVs and Internet of Things (IoT) devices—are vulnerable to malware attacks that can be executed remotely without any user interaction. Researchers at Armis have uncovered a total…
