Remove vulnerabilities-threats apple-warns-users-targeted-by-mercenary-spyware
article thumbnail

Apple Calls Out 'Mercenary Spyware' Vendors Enabling State Surveillance

SecureWorld News

Apple has escalated its fight against the commercial spyware industry enabling state actors to conduct highly-targeted cyberattacks against journalists, activists, politicians, and other high-risk individuals around the world. Apple introduced Lockdown Mode in mid-2022 as a response to this growing threat.

Spyware 91
article thumbnail

Security Affairs newsletter Round 467 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

Crooks manipulate GitHub’s search results to distribute malware BatBadBut flaw allowed an attacker to perform command injection on Windows Roku disclosed a new security breach impacting 576,000 accounts LastPass employee targeted via an audio deepfake call TA547 targets German organizations with Rhadamanthys malware CISA adds D-Link multiple (..)

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CISA Issues Alert to Secure iPhones Against Pegasus Spyware Zero-Days

SecureWorld News

Alarming details have emerged about the exploitation of two Zero-Day vulnerabilities to deploy NSO Group's Pegasus commercial spyware on iPhones. These vulnerabilities, tracked as CVE-2023-41064 and CVE-2023-41061 , were actively abused as part of a zero-click exploit chain, according to security researchers at The Citizen Lab.

Spyware 103
article thumbnail

Zero-Click Attacks a Growing Threat

eSecurity Planet

They can compromise the targeted device despite a victim’s good security hygiene and practices. NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Also read: Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities.

Spyware 108
article thumbnail

Weekly Vulnerability Recap – Sept. 11, 2023 – Android Update Fixes 33 Vulnerabilities

eSecurity Planet

This week’s vulnerability news is proof that everyone experiences security vulnerabilities, even the biggest tech names and projects. Android, Apple, Apache, Cisco, and Microsoft are among the names reporting significant security vulnerabilities and fixes in the last week, and some of those are already under assault by hackers.

VPN 105
article thumbnail

Apple's Emergency Patch: What it Means for Organizations

SecureWorld News

The Toronto-based research group works to protect journalists and activists from cyberattacks and spyware. And oftentimes they come across new tech-enabled spying efforts from Israel-based NSO Group, which claims to carefully vet sales of its spyware. Citizen Lab discovers zero-day and zero-click spyware. gif” extension.

Spyware 70
article thumbnail

Advanced threat predictions for 2024

SecureList

Advanced persistent threats (APTs) are the most dangerous threats, as they employ complex tools and techniques, and often are highly targeted and hard to detect. In July, we reported an updated variant of Owowa used against targets in Russia. A review of last year’s predictions 1.

Hacking 102