article thumbnail

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Tenable

On September 7, researchers at Citizen Lab published a blog post detailing their discovery of an iPhone zero-click, zero-day exploit chain in Apple iOS used to deploy a spyware known as Pegasus. It is a part of Apple operating systems from iOS and iPadOS to macOS, and watchOS. What is WebP or libwebp?

article thumbnail

Hidden inside Dark Caracal’s espionage apps: Old tech

The Parallax

The hackers hid Trojan malware in legitimate-looking and functioning apps for devices running Google’s Android operating system, promoting their third-party app marketplace installation via links on Facebook and other social platforms. ”—Michael Flossman, senior security researcher, Lookout Mobile Security.

Malware 170
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Learn the Language of Vulnerability Assessment: Key Security Terms You Should Know

Tenable

Arguably the best-known measurement for evaluating these threats is the Common Vulnerability Scoring System (CVSS), 1 a scale devised by the Forum of Incident Response and Security Teams (FIRST) cybersecurity organization. Spyware: Programs that monitor activity of infected computers (e.g., Balancing security and compliance.

Malware 89
article thumbnail

Cybersecurity Snapshot: Tips for cloud configs, MSP vetting, CISO board presentations

Tenable

federal government, CISA encourages all organizations to read, pilot and react to them. 3 Real-World Challenges Facing Cybersecurity Organizations ”. Systems management. Of course, organizations can also use the document to evaluate IT service providers and MSPs they’re already working with. Incident response. government.

Cloud 52
article thumbnail

AI Applications in Cybersecurity with Real-Life Examples

Altexsoft

You can use regression to predict system calls of operating systems, and then identify anomalies by comparing the prediction to an actual call. You can classify a binary file into categories like legitimate software, adware, ransomware, and spyware. The Impact of AI on Cybersecurity. Vulnerability management.

article thumbnail

Runa Sandvik’s new startup Granitt secures at-risk people from hackers and nation states

TechCrunch

Journalists and activists are increasingly targeted by the wealthy and resourceful who seek to keep the truth hidden, from nation-state aligned hackers hacking into journalist’s inboxes to governments deploying mobile spyware to snoop on their most vocal critics. Runa Sandvik, founder of Granitt. Image: (supplied).

Spyware 308
article thumbnail

The Top 5 Mobile Security Threats and How to Mitigate Them

Palo Alto Networks

Mobile devices have emerged in recent years as the leading platform for cybercrime and cybersecurity threats against organizations. However, organizations are still working to protect these relatively new additions to enterprise networks, especially since they often contain a mixture of business and personal data.

Mobile 11