The Hacker News

SEPTEMBER 9, 2023

Spyware masquerading as modified versions of Telegram have been spotted in the Google Play Store that’s designed to harvest sensitive information from compromised Android devices. According to Kaspersky security researcher Igor Golovin, the apps come with nefarious features to capture and exfiltrate names, user IDs, contacts, phone numbers, and chat messages to an actor-controlled server.

Spyware 135

Spyware 135

Bleeping Computer

SEPTEMBER 9, 2023

Google has started to roll out its new interest-based advertising platform called the Privacy Sandbox, shifting the tracking of user's interests from third-party cookies to the Chrome browser. [.

Advertising 128

Advertising Technology 128

Security Affairs

SEPTEMBER 9, 2023

US CISA added critical vulnerability CVE-2023-33246 in Apache RocketMQ to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw CVE-2023-33246 (CVSS score 9.8) affecting Apache RocketMQ to its Known Exploited Vulnerabilities Catalog. Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verification.

Internet 108

Internet Internet Hacking Malware 108

Bleeping Computer

SEPTEMBER 9, 2023

A new phishing campaign is abusing Microsoft Teams messages to send malicious attachments that install the DarkGate Loader malware. [.

Phishing 142

Phishing Malware 142

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

WIRED Threat Level

SEPTEMBER 9, 2023

Plus: Apple patches newly discovered flaws exploited by NSO Group spyware, North Korean hackers target security researchers, and more.

Data privacy 121

Data privacy Spyware Hacking 121

Security Boulevard

SEPTEMBER 9, 2023

Welcome to the 8th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API7:2023 Server Side Request Forgery (SSRF). In this series we are taking an in-depth look at each category – the details, the impact and what [.] The post 2023 OWASP Top-10 Series: API7:2023 Server Side Request Forgery appeared first on Wallarm.

67

67

Security Boulevard

SEPTEMBER 9, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Brent Patterson – Creative Hacking With Blender appeared first on Security Boulevard.

Hacking 62

Hacking Architecture CISO Education 62

Security Boulevard

SEPTEMBER 9, 2023

The days are getting shorter and when we were visiting Down East Maine the other week, there was just a hint of some trees starting to change up their leaf palettes. It was a solid reminder to re-up my ~annual “foliage” plotting that I started way back in 2017. The fine folks over at Smoky. Continue reading → The post Foliage 2023 appeared first on Security Boulevard.

57

57