Red Cross-Themed Phishing Attacks Distributing DangerAds and AtlasAgent Backdoors

A new threat actor known as AtlasCross has been observed leveraging Red Cross-themed phishing lures to deliver two previously undocumented backdoors named DangerAds and AtlasAgent. NSFOCUS Security Labs described the adversary as having a « high technical level and cautious attack attitude, » adding that « the phishing attack activity captured this time is part of the attacker’s targeted strike on

CERTFR-2023-ACT-042 : Multiples vulnérabilités dans libwebp (27 septembre 2023)

La bibliothèque libwebp a été créée par Google en 2010 pour le traitement d’images au format WebP. Le 11 septembre 2023, Google a publié un avis de …

Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data

A novel side-channel attack called GPU.zip renders virtually all modern graphics processing units (GPU) vulnerable to information leakage. « This channel exploits an optimization that is data dependent, software transparent, and present in nearly all modern GPUs: graphical data compression, » a group of academics from the University of Texas at Austin, Carnegie Mellon University, University of

New Survey Uncovers How Companies Are Confronting Data Security Challenges Head-On

Data security is in the headlines often, and it’s almost never for a positive reason. Major breaches, new ways to hack into an organization’s supposedly secure data, and other threats make the news because well, it’s scary — and expensive.  Data breaches, ransomware and malware attacks, and other cybercrime might be pricey to prevent, but […]

New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software

A new malware strain called ZenRAT has emerged in the wild that’s distributed via bogus installation packages of the Bitwarden password manager. « The malware is specifically targeting Windows users and will redirect people using other hosts to a benign web page, » enterprise security firm Proofpoint said in a technical report. « The malware is a modular remote access […]