Author: Jai Vijayan

Apple’s updates this week included fixes for two zero-day flaws, several code execution bugs, and vulnerabilities that allowed attackers to bypass its core security protections. Source: Darkreading Attacks Breaches

“BotenaGo” contains exploits for more than 30 vulnerabilities in multiple vendor products and is being used to spread Mirai botnet malware, security vendor says. Source: Darkreading Attacks Breaches

Signs hint at Russia’s APT28, aka Fancy Bear, being behind the attacks, according to new research. Source: Darkreading Attacks Breaches

The authors of the infamous malware family have added measures for better protecting malicious code injections against inspection and research. Source: Darkreading Attacks Breaches

Threat actors from Eastern Europe seen expressing some concern about Russia being a safe place for them to continue operating, researchers say. Source: Darkreading Attacks Breaches

MoonBounce is the latest in a small but growing number of implants found hidden in a computer’s Unified Extensible Firmware Interface (UEFI). Source: Darkreading Attacks Breaches

More than 50,000 targets around the world have been affected by the business email compromise scams, Interpol reports. Source: Darkreading Attacks Breaches

“WhisperGate” malware was used to overwrite Master Boot Record and other files to render systems inoperable at several organizations in Ukraine, Microsoft says. Source: Darkreading Attacks Breaches

Timing of the move has evoked at least some skepticism from security experts about the country’s true motives. Source: Darkreading Attacks Breaches

The vulnerability was patched this week in Microsoft’s set of security updates for January 2022. Source: Darkreading Attacks Breaches