RevBits

#Microsoft has released an out-of-band #update to address a privacy-defeating #flaw in its #screenshot #editing #tool for #Windows 10 and #Windows 11. thehackernews.com/2023/03/micros… #cybersecurity #cybersecuritynews #vulnerability

A new information-stealing #malware has set its sights on #Apple's #macOS operating system to #siphon #sensitive #information from #compromised #devices. thehackernews.com/2023/03/new-ma… #cybersecurity #cybersecuritynews #vulnerability #information #steal

A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. thehackernews.com/2023/03/malici… #cybersecurity #cybersecuritynews #vulnerability

Cloud-based repository hosting service GitHub said it took the step of replacing its RSA SSH host key used to secure Git operations "out of an abundance of caution" after it was briefly exposed in a public repository. thehackernews.com/2023/03/github… #cybersecurity #vulnerability

#OpenAI on Friday disclosed that a #bug in the #Redis open source library was responsible for the #exposure of other users' personal #information and chat titles in the upstart's #ChatGPT service earlier this week. thehackernews.com/2023/03/openai… #cybersecurity #vulnerability

In what's a case of setting a thief to catch a #thief, the U.K. National Crime Agency (#NCA) revealed that it has created a #network of #fake #DDoS-for-hire #websites to infiltrate the online #criminal underground. thehackernews.com/2023/03/uk-nat… #cybersecurity #vulnerability

#Google has stepped in to remove a bogus #Chrome #browser #extension from the official Web #Store that masqueraded as #OpenAI's #ChatGPT service to harvest #Facebook session #cookies and #hijack the #accounts. thehackernews.com/2023/03/fake-c… #cybersecurity #vulnerability #ai

#Patches have been released for a #critical #security #flaw impacting the #WooCommerce #Payments plugin for #WordPress, which is installed on over 500,000 #websites. thehackernews.com/2023/03/critic… #cybersecurity #cybersecuritynews #vulnerability

#RevBits was named as #Gold #Winner in the #PAM category in the 2023 #Cybersecurity #Excellence #Awards. The review process judges the world's top providers by their organizational #size, #performance, #technology, #products, and #leadership. businesswire.com/news/home/2023…

State-backed #hackers from North #Korea are conducting #ransomware attacks against #healthcare and critical infrastructure facilities to fund illicit activities, U.S. and South Korean cybersecurity and intelligence agencies warned in a joint advisory. thehackernews.com/2023/02/north-…

A zero-day vulnerability affecting #Fortra's# GoAnywhere #MFT managed file #transfer #application is being actively #exploited in the #wild. thehackernews.com/2023/02/warnin… #cybersecurity #news #vulnerability #file

A new #Android #banking #trojan has set its eyes on #Brazilian #financial #institutions to commit fraud by leveraging the #PIX #payments platform. thehackernews.com/2023/02/pixpir… #cybersecurity #cybersecuritynews #vulnerability #data

#VMware #ESXi hypervisors are the target of a new #wave of attacks designed to deploy #ransomware on compromised #systems. thehackernews.com/2023/02/new-wa… #cybersecurity #news #vulnerability

#F5 has warned of a high-severity #flaw impacting #BIG-IP appliances that could lead to denial-of-service (#DoS) or arbitrary code #execution. thehackernews.com/2023/02/new-hi… #cybersecurity #news #vulnerability #cisco

The #Iranian nation-state #hacking group known as #OilRig has continued to target #government organizations in the Middle #East as part of a cyber #espionage campaign that leverages a new #backdoor to #exfiltrate data. thehackernews.com/2023/02/irania… #cybersecurity #vulnerability #data

A new #intelligence gathering campaign linked to the prolific #North #Korean state-sponsored #Lazarus Group leveraged known security #flaws in unpatched #Zimbra devices to #compromise victim #systems. thehackernews.com/2023/02/north-… #cybersecurity #cybersecuritynews #vulnerability

At least 1,200 #Redis #database #servers worldwide have been corralled into a #botnet using an "elusive and severe threat" dubbed #HeadCrab since early September 2021. thehackernews.com/2023/02/new-th… #cybersecurity #news #vulnerability

A new #attack campaign has targeted the #gaming and #gambling sectors since at least September 2022, just months prior to the #ICE London 2023 gaming #industry trade fair event that's scheduled next week. thehackernews.com/2023/02/expert… #cybersecurity #vulnerability #icebreaker

Cybersecurity researchers have disclosed details of two #security #flaws in the open source #ImageMagick #software that could potentially lead to a denial-of-service (#DoS) and information disclosure. thehackernews.com/2023/02/resear… #cybersecurity #news #vulnerability

#GitHub on Monday disclosed that unknown threat actors managed to exfiltrate #encrypted code signing #certificates pertaining to some versions of GitHub #Desktop for #Mac and #Atom #apps. thehackernews.com/2023/01/github… #cybersecurity #news #vulnerability