BleepingComputer.com

"New proxy malware targets Mac users through pirated software."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.

Accessed on 03 December 2023, 1544 UTC.

Content and Source:  https://www.bleepingcomputer.com/ ("BleepingComputer.com").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

New proxy malware targets Mac users through pirated software

  • Cybercriminals are targeting Mac users with a new proxy trojan malware bundled with popular, copyrighted macOS software being offered on warez sites.

  • Microsoft Exchange
     

Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks

  • Tens of thousands of Microsoft Exchange email servers in Europe, the U.S., and Asia exposed on the public internet are vulnerable to remote code execution flaws.

  • Google Chrome Flare
     

Google Chrome's new cache change could boost performance

  • Google is introducing a significant change to Chrome's Back/Forward Cache (BFCache) behavior, allowing web pages to be stored in the cache, even if a webmaster specifies not to store a page in the browser's cache.

  • Citrix Bleed
     

US Health Dept urges hospitals to patch critical Citrix Bleed bug

  • The U.S. Department of Health and Human Services (HHS) warned hospitals this week to patch the critical 'Citrix Bleed' Netscaler vulnerability actively exploited in attacks.

  • Police arrest
     

The Week in Ransomware - December 1st 2023 - Police hits affiliates

  • An international law enforcement operation claims to have dismantled a ransomware affiliate operation in Ukraine, which was responsible for attacks on organizations in 71 countries.

  • Hacker prison
     

TrickBot malware dev pleads guilty, faces 35 years in prison

  • On Thursday, a Russian national pleaded guilty to charges related to his involvement in developing and deploying the Trickbot malware, which was used in attacks against hospitals, companies, and individuals in the United States and worldwide.

  • Raccoon Stealer
     

Hackers use new Agent Raccoon malware to backdoor US targets

  • A novel malware named 'Agent Raccoon' (or Agent Racoon) is being used in cyberattacks against organizations in the United States, the Middle East, and Africa.

  • frag-of-france
     

French government recommends against using foreign chat apps

  • Prime Minister of France Élisabeth Borne signed a circular last week requesting all government employees to uninstall foreign communication apps such as Signal, WhatsApp, and Telegram by December 8, 2023, in favor of a French messaging app named 'Olvid.'

  • VMware
     

VMware fixes critical Cloud Director auth bypass unpatched for 2 weeks

  • VMware has fixed a critical authentication bypass vulnerability in Cloud Director appliance deployments, a bug that was left unpatched for over two weeks since it was disclosed on November 14th.

  • Windows 10
     

Windows 10 KB5032278 update adds Copilot AI assistant, fixes 13 bugs

  • Microsoft has started rolling out its Copilot AI assistant to Windows 10 with the KB5032278 November 2023 non-security preview update for systems running Windows 10, version 22H2.

  • LogoFail red
     

LogoFAIL attack can install UEFI bootkits through bootup logos

  • Multiple security vulnerabilities collectively named LogoFAIL affect image-parsing components in the UEFI code from various vendors. Researchers warn that they could be exploited to hijack the execution flow of the booting process and to deliver bootkits.

  • North Korean hackers
     

US govt sanctions North Korea’s Kimsuky hacking group

  • The Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned the North Korean-backed Kimsuky hacking group for stealing intelligence in support of the country's strategic goals.

  • WhatsApp
     

WhatsApp's new Secret Code feature hides your locked chats

  • WhatsApp has introduced a new Secret Code feature that allows users to hide their locked chats by setting a custom password.

  • Emsisoft
     

Get 20% off Emsisoft's Enterprise Security EDR solution for the holidays

  • Emsisoft is having a holiday deal where you can get 20% off 1-year licenses of the Emsisoft Enterprise Security EDR solution through December 17th, 2023, with no license limits.

  • Apple
     

Apple fixes two new iOS zero-days in emergency updates

  • Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year.

  • Capital Health
     

Capital Health Hospitals hit by cyberattack causing IT outages

  • Capital Health hospitals and physician offices across New Jersey are experiencing IT outages after a cyberattack hit the non-profit organization's network earlier this week.

VIEW MORE

Comments

Popular posts from this blog

The Cyberwire Daily Briefing

BleepingComputer.com

SecurityWeek Briefing