EvilProxy uses indeed.com open redirect for Microsoft 365 phishing


A recently uncovered phishing campaign is targeting Microsoft 365 accounts of key executives in U.S.-based organizations by abusing open redirects from the Indeed employment website for job listings. [...]


https://www.bleepingcomputer.com/news/se...-phishing/

Microsoft Edge, Teams get fixes for zero-days in open-source libraries


Microsoft released emergency security updates for Edge, Teams, and Skype to patch two zero-day vulnerabilities in open-source libraries used by the three products. [...]


https://www.bleepingcomputer.com/news/mi...libraries/

Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers


Qualcomm is warning of three zero-day vulnerabilities in its GPU and Compute DSP drivers that hackers are actively exploiting in attacks. [...]


https://www.bleepingcomputer.com/news/se...p-drivers/

ShellTorch flaws expose AI servers to code execution attacks


A set of critical vulnerabilities dubbed 'ShellTorch' in the open-source TorchServe AI model-serving tool impact tens of thousands of internet-exposed servers, some of which belong to large organizations. [...]


https://www.bleepingcomputer.com/news/se...n-attacks/

Android October security update fixes zero-days exploited in attacks


Google has released the October 2023 security updates for Android, addressing 54 unique vulnerabilities, including two known to be actively exploited. [...]


https://www.bleepingcomputer.com/news/se...n-attacks/

Google to bolster phishing and malware delivery defenses in 2024


Google will introduce new sender guidelines in February to bolster email security against phishing and malware delivery by mandating bulk senders to authenticate their emails and adhere to stricter spam thresholds [...]


https://www.bleepingcomputer.com/news/se...s-in-2024/

Microsoft now lets you play a game during Windows 11 installs


Microsoft has introduced a new twist to the Windows 11 installation and update process, transforming it from a mundane task into an enjoyable experience. [...]


https://www.bleepingcomputer.com/news/mi...-installs/

New 'Looney Tunables' Linux bug gives root on major distros


A new Linux vulnerability known as 'Looney Tunables' enables local attackers to gain root privileges by exploiting a buffer overflow weakness in the GNU C Library's ld.so dynamic loader. [...]


https://www.bleepingcomputer.com/news/se...r-distros/

Emergency alert on US phones and TVs today — Don’t worry, it’s just a test

The U.S. Federal Emergency Management Agency (FEMA) and the Federal Communications Commission (FCC) will run an emergency alert test today to check Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) capabilities nationwide. [...]


https://www.bleepingcomputer.com/news/te...st-a-test/

Account Takeover: The Silent Threat in the Digital World

In the vast expanse of the digital ecosystem, where online identities are as valuable as…

Account Takeover: The Silent Threat in the Digital World on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.