Iran-Linked ‘Charming Kitten’ Touts New Spearphishing Tactics
A campaign first observed last year has ramped up its attack methods and appears to be linked to activity targeting President Trump’s 2020 re-election campaign.
Elizabeth Montalbano
Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign
Attackers exploit an “unquoted path” flaw in the Bonjour updater in iTunes for Windows to deliver ransomware attacks.
Twitter Uses Phone Numbers, Emails to Sell Ads
Data collected for two-factor authentication purposes “inadvertently” matched users to targeted-advertising lists, the company admits.
U.S. and U.K. agencies warn consumers to update VPN technologies from Fortinet, Pulse Secure and Palo Alto Networks.
A group called Phosphorous has been trying to access Microsoft-based email accounts of people associated with the campaign.
Officials say they are concerned about their ability to fight crime and protect citizens, while privacy advocates remain critical of government interference
A double-free bug could allow an attacker to achieve remote code execution; users are encouraged to update to a patched version of the messaging app.
PDFex can bypass encryption and password protection in most PDF readers and online validation services
Fileless threat leverages widely used Node.js framework and WinDivert packet-capture utility to turn infected machines into proxies for malicious behavior.
Users scrambled to find a fix for the problem and eventually Google took responsibility for the issue.
