Android ‘ActionSpy’ Malware Targets Turkic Minority Group
Researchers warn that the Earth Empusa threat group is distributing the spyware by injecting code into fake and watering-hole pages.
Vulnerabilities
Helping Remote Workers Overcome Remote Attacks
Because remote workers’ devices are all connected to a home network, they don’t even need to be attacked directly. Instead, attackers have multiple avenues of attack that can be exploited.
Critical Intel Flaws Fixed in Active Management Technology
Two critical flaws in Intel AMT, which could enable privilege escalation, were patched along with 20 other bugs in its June security update.
The June Patch Tuesday update included CVEs for 11 critical remote code-execution vulnerabilities and concerning SMB bugs.
Critical Adobe Flash Player and Framemaker flaws could enable arbitrary code execution.
The release of a PoC for the Windows flaw known as “SMBGhost” could set off cyberattack waves, CISA warned.
A researcher found that phone numbers tied to WhatsApp accounts are indexed publicly on Google Search creating what he claims is a “privacy issue” for users.
An attack over the weekend unsuccessfully targeted 1.3 million WordPress websites, in attempts to download their configuration files and harvest database credentials.
Researchers warn of critical flaws in SAP’s Sybase Adaptive Server Enterprise software.
Google and Qualcomm both addressed significant vulnerabilities in their June updates.
