Arm's Mali GPU driver has five exploitable flaws that remain unpatched months af...

Ducktail operators running malvertising campaigns leveraging compromised Faceboo...

DraftKings, which suffered a credentials-stuffing attack recently, would be comp...

GPU

Android

Vulnerability

Android Users Are Still At Risk Due To A "Patch Gap" In Mali GPU

Arm's Mali GPU driver has five exploitable flaws that remain unpatched months after the chip vendor fixed them, leaving millions of Android devices vulnerable......

24-Nov-2022

4 min read

Malvertising

Data Breach

Ducktail

Compromised Facebook Business Posing As Attack Vector For Ducktail

Ducktail operators running malvertising campaigns leveraging compromised Facebook Business accounts…

23-Nov-2022

5 min read

Credential Stuffing Attack

$300,000 stolen in the DraftKings credential stuffing attack

DraftKings, which suffered a credentials-stuffing attack recently, would be compensating all the impacted consumers for incurred losses of a whopping $300,000......

22-Nov-2022

3 min read

Daixin

Ransomware

Air Asia

Daixin Group spared on AirAsia due to poor security despite 5Mn theft

AirAsia was spared from upcoming ransomware attacks due to very poor security standards by Daixin Group despite stealing 5 million details of passengers & employees... ...

22-Nov-2022

3 min read

Data Breach

Unauthorized Access

Booz Allen alleges ex-employee downloaded employees records

Booz Allen Hamilton stated that a former employee took personal information from the company's internal network…

20-Nov-2022

2 min read

RapperBot

Botnet

Game servers hit by DDoS attacks involving updated RapperBot malware

Major game servers targeted by resurrected RapperBot malware in DDoS attacks infecting IoT devices…

20-Nov-2022

4 min read

Vulnerability

Misconfiguration

Crowd & BitBucket servers receive patches for command injection flaw

The Crowd Server and Data Center vulnerability, identified as CVE-2022-43782, is rated as critical. Due to a configuration error, an adversary may make privileged API calls while authenticated as the Crowd app. ...

19-Nov-2022

3 min read

CDSL

Malware

Internal systems of CDSL India compromised after detecting malware

India's largest security depository, CDSL, has confirmed the presence of unidentified malware that compromised several internal systems… ...

19-Nov-2022

2 min read

End of Support

.NET

Microsoft

Immediately migrate to new .NET Core versions until EOS: Microsoft warns

Microsoft urged everyone in the use of the Windows message center to upgrade to .NET 6 (LTS) or .NET 7 "asap" before .NET Core 3.1 (LTS) reaches EOS on December 13, 2022… ...

17-Nov-2022

3 min read