WordPress Block Editor could let even most basic users exploit XSS vulns!
WordPress 5.4.2 release announcement stated the update shipped with multiple fixes for Cross-Site Scripting (XSS) vulnerabilities. Out of this the most significant
Read more
vulnerability
“Sign in with Apple” vulnerability earns researcher $100,000
Remember seeing that slick “Sign in with Apple” button across many websites and apps? It turns out that a vulnerability allowed
Read more
Microsoft IIS servers hacked by Blue Mockingbird to mine Monero
This month news broke about a hacker group, namely Blue Mockingbird, exploiting a critical vulnerability in Microsoft IIS servers to plant Monero (XMR)
Read more
Dissecting DEFENSOR: a stealthy Android banking malware
The apps named DEFENSOR ID and Defensor Digital rely mainly on Android’s Accessibility Service to conduct malicious activities, and go undetected. The attacker controlled C&C domains are still up – well at least one of them, and that’s problematic.
Read more