Cybersecurity News - Page 301

UNC2465 compromised a website of a CCTV camera vendor and planted malware in the Dahua SmartPSS Windows app.

The police shut down the infrastructure used to spread the malware and blocked channels for legalizing criminally acquired cryptocurrencies.

The company said that it became aware of the cyberattack in May and that it is working "to determine the scope of potential data that may have been involved."

The breach was part of the cyber-espionage campaign involving Pulse Connect Secure networking devices that came to light in April.

The analysis of the source code revealed it contained Russian comments, giving an inkling of the origin of a developer behind the ransomware.

Both bugs affect the WebKit component in Apple iOS and allow remote code execution.

Emsisoft released a free decryptor that allows victims to recover their files.

Attackers claim to have stolen roughly 750 GB of data, including FIFA 21 and FrostBite game engine source code.

Chrome zero-day flaw was exploited by the same threat actor that targeted the Windows CVE-2021-33742 zero-day.

Two of the zero-day flaws have been abused in highly targeted attacks by a new threat actor dubbed PuzzleMaker.