Remove Groups Remove Operating System Remove Spyware Remove Windows
article thumbnail

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Tenable

On September 7, researchers at Citizen Lab published a blog post detailing their discovery of an iPhone zero-click, zero-day exploit chain in Apple iOS used to deploy a spyware known as Pegasus. It is a part of Apple operating systems from iOS and iPadOS to macOS, and watchOS. What is WebP or libwebp? and iPadOS 16.6.1

article thumbnail

Hidden inside Dark Caracal’s espionage apps: Old tech

The Parallax

The digital-rights group Electronic Frontier Foundation and Lookout Mobile Security, which co-authored the report, say they tracked the Dark Caracal phishing campaign across more than 60 websites. “ If you had even a little mobile development experience, [Dark Caracal] could cost less than $1,000.”—Michael

Malware 170
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cybersecurity Snapshot: Tips for cloud configs, MSP vetting, CISO board presentations

Tenable

5 - Government warns healthcare orgs about new cybercrime group. Healthcare and public health organizations are being targeted with ransomware and data extortion attacks by the Daixin Team cybercrime group, according to the U.S. TeamSpy, spyware that uses remote access tool TeamViewer and malware to steal information.

Cloud 52
article thumbnail

Runa Sandvik’s new startup Granitt secures at-risk people from hackers and nation states

TechCrunch

Journalists and activists are increasingly targeted by the wealthy and resourceful who seek to keep the truth hidden, from nation-state aligned hackers hacking into journalist’s inboxes to governments deploying mobile spyware to snoop on their most vocal critics. That’s definitely still a part of what I do.

Spyware 308
article thumbnail

Zero-Day: Vulnerabilities, Exploits, Attacks and How to Manage Them

Kaseya

Those tools also take an inventory of all IT assets, such as servers, desktops, virtual machines, operating systems, applications and active ports, on each machine to scan them for security flaws. Originally developed by NASA as a cyberattack tool, it was stolen and leaked by the Shadow Brokers hacking group in March 2017.