"New proxy malware targets Mac users through pirated software."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.

Accessed on 03 December 2023, 1544 UTC.

Content and Source: ("").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (

New proxy malware targets Mac users through pirated software

  • Cybercriminals are targeting Mac users with a new proxy trojan malware bundled with popular, copyrighted macOS software being offered on warez sites.

  • Microsoft Exchange

Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks

  • Tens of thousands of Microsoft Exchange email servers in Europe, the U.S., and Asia exposed on the public internet are vulnerable to remote code execution flaws.

  • Google Chrome Flare

Google Chrome's new cache change could boost performance

  • Google is introducing a significant change to Chrome's Back/Forward Cache (BFCache) behavior, allowing web pages to be stored in the cache, even if a webmaster specifies not to store a page in the browser's cache.

  • Citrix Bleed

US Health Dept urges hospitals to patch critical Citrix Bleed bug

  • The U.S. Department of Health and Human Services (HHS) warned hospitals this week to patch the critical 'Citrix Bleed' Netscaler vulnerability actively exploited in attacks.

  • Police arrest

The Week in Ransomware - December 1st 2023 - Police hits affiliates

  • An international law enforcement operation claims to have dismantled a ransomware affiliate operation in Ukraine, which was responsible for attacks on organizations in 71 countries.

  • Hacker prison

TrickBot malware dev pleads guilty, faces 35 years in prison

  • On Thursday, a Russian national pleaded guilty to charges related to his involvement in developing and deploying the Trickbot malware, which was used in attacks against hospitals, companies, and individuals in the United States and worldwide.

  • Raccoon Stealer

Hackers use new Agent Raccoon malware to backdoor US targets

  • A novel malware named 'Agent Raccoon' (or Agent Racoon) is being used in cyberattacks against organizations in the United States, the Middle East, and Africa.

  • frag-of-france

French government recommends against using foreign chat apps

  • Prime Minister of France √Člisabeth Borne signed a circular last week requesting all government employees to uninstall foreign communication apps such as Signal, WhatsApp, and Telegram by December 8, 2023, in favor of a French messaging app named 'Olvid.'

  • VMware

VMware fixes critical Cloud Director auth bypass unpatched for 2 weeks

  • VMware has fixed a critical authentication bypass vulnerability in Cloud Director appliance deployments, a bug that was left unpatched for over two weeks since it was disclosed on November 14th.

  • Windows 10

Windows 10 KB5032278 update adds Copilot AI assistant, fixes 13 bugs

  • Microsoft has started rolling out its Copilot AI assistant to Windows 10 with the KB5032278 November 2023 non-security preview update for systems running Windows 10, version 22H2.

  • LogoFail red

LogoFAIL attack can install UEFI bootkits through bootup logos

  • Multiple security vulnerabilities collectively named LogoFAIL affect image-parsing components in the UEFI code from various vendors. Researchers warn that they could be exploited to hijack the execution flow of the booting process and to deliver bootkits.

  • North Korean hackers

US govt sanctions North Korea’s Kimsuky hacking group

  • The Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned the North Korean-backed Kimsuky hacking group for stealing intelligence in support of the country's strategic goals.

  • WhatsApp

WhatsApp's new Secret Code feature hides your locked chats

  • WhatsApp has introduced a new Secret Code feature that allows users to hide their locked chats by setting a custom password.

  • Emsisoft

Get 20% off Emsisoft's Enterprise Security EDR solution for the holidays

  • Emsisoft is having a holiday deal where you can get 20% off 1-year licenses of the Emsisoft Enterprise Security EDR solution through December 17th, 2023, with no license limits.

  • Apple

Apple fixes two new iOS zero-days in emergency updates

  • Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year.

  • Capital Health

Capital Health Hospitals hit by cyberattack causing IT outages

  • Capital Health hospitals and physician offices across New Jersey are experiencing IT outages after a cyberattack hit the non-profit organization's network earlier this week.



Popular posts from this blog

SecurityWeek Briefing.

Cyber War Newswire

SecurityWeek Briefing.