Full-fledged exploits detected for Specter vulnerability
French cybersecurity specialist Julien Voisin reported that in early February 2021, someone uploaded exploits for the Specter vulnerability to VirusTotal. This is the first time that a "combat" exploit for…
Hackers used Firefox extension to hack Gmail
Proofpoint discovered a campaign in which hackers used a Firefox extension to hack Gmail. The attacks were linked to the Chinese group TA413. According to the researchers, the campaign was…
In LastPass for Android found seven built-in trackers
German cybersecurity expert Mike Kuketz noticed that the LastPass Android app has seven trackers that monitor users. The researcher builds his findings on the report of the non-profit organization Exodus,…
For old school lovers: WACUP has fixed many bugs in Winamp
Bleeping Computer drew attention to an interesting project WACUP, which fixed bugs in the old school and nostalgic player Winamp. The Winamp Community Update Project (WACUP) is run by former…
A special version of Flash for China turned into adware
Many users and cybersecurity specialists have discovered that a special version of Flash for China has turned into adware. As you know, at the beginning of 2021, support for Adobe…
Clubhouse user dialogs leaked to a third-party site
The social network Clubhouse said that the dialogs of some of its users, who were in a closed room, leaked to a third-party site. The reason for this was a…
Discovery of XSS vulnerability on iCloud website brought expert $5,000
Vishal Bharad, an Indian bug hunter and pentester, explained in a blog post, how he discovered an XSS vulnerability on iCloud.com. Initially, the researcher searched the site for vulnerabilities related…
Microsoft: SolarWinds Hackers Stole Source Codes of Azure, Exchange and Intune Components
Microsoft experts announced that they have completed an official investigation of the attack, and told what exactly SolarWinds hackers were able to steal. The company reiterated that it was found…
Netherlands police posted warnings on hacker forums
The Netherlands police posted warnings on popular Russian and English hacker forums (RaidForums and XSS), stating that "the deployment of criminal infrastructure in the Netherlands is hopeless." The messages were…
Vulnerability in WebKit engine could redirect iOS and macOS users to scam sites
Confiant experts report that malicious ads have been abusing a zero-day vulnerability in WebKit browsers engine (CVE-2021-1801) since last year, and although the patches were released in early February, attacks…
Microsoft Says Over 1,000 Developers Worked on SolarWinds Attack
In an interview with CBSNews, Microsoft President Brad Smith said the recent attack on SolarWinds was "the largest and most sophisticated he has ever seen." According to him, the analysis…
Telegram for macOS did not delete self-destructing videos
Telegram developers have fixed a bug due to which self-destructing audio and video were not removed from devices running macOS. Let me remind you that in the secret chat mode,…