LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

As part of a multi-year campaign, a Chinese threat actor has targeted high-value organizations in South, Southeast, and East Asia. Palo Alto Networks Unit.

New Linux Rootkits Leverage eBPF and io_uring For Stealth

New Linux Rootkits Leverage eBPF and io_uring For Stealth

CYBER ATTACKZerowl

As attackers start abusing contemporary Linux features like eBPF and io_uring instead of relying on outdated kernel module tricks, Linux rootkits are.

Microsoft Warns Fake AI Browser Extensions Compromised Chat Histories Across 20,000+ Enterprise Tenants

Microsoft Warns Fake AI Browser Extensions Compromised Chat Histories Across 20,000+ Enterprise Tenants

CYBER ATTACKZerowl

Over 20,000 business environments have been covertly compromised by a wave of fake AI-powered browser extensions, jeopardizing the chat histories of.

Hackers Exploit Windows Terminal In New ClickFix Malware Attack

Hackers Exploit Windows Terminal In New ClickFix Malware Attack

CYBER ATTACKZerowl

A new ClickFix social engineering campaign that exploits Windows Terminal to run malicious payloads on compromised systems has been discovered by security.

Fake imToken Browser Extension Targets Crypto Wallet Credentials

Fake imToken Browser Extension Targets Crypto Wallet Credentials

CYBER ATTACKZerowl

Security experts have discovered a malicious Chrome extension that poses as the well-known cryptocurrency wallet imToken and is intended to steal users'.

Fake AI Browser Extensions Expose Chat Data Across 20,000 Enterprises

Fake AI Browser Extensions Expose Chat Data Across 20,000 Enterprises

CYBER ATTACKZerowl

Researchers at Microsoft Defender have issued a warning regarding malicious browser extensions that pose as AI assistant tools and surreptitiously gather.

CISA Warns of macOS and iOS Vulnerabilities Exploited in Attacks

CISA Warns of macOS and iOS Vulnerabilities Exploited in Attacks

CYBER ATTACKZerowl

CISA Alerts Users to iOS and macOS Vulnerabilities A critical alert about several Apple vulnerabilities that are currently being actively exploited has.

After ownership is transferred, the Chrome extension becomes malicious, allowing code injection and data theft.

After ownership is transferred, the Chrome extension becomes malicious, allowing code injection and data theft.

Following what appears to be a case of ownership transfer, two Google Chrome extensions have turned malicious, giving attackers a means to harvest.

When Auto-Updates Become Attack Paths

When Auto-Updates Become Attack Paths

The idea that utilizing an application's internal update mechanisms is advantageous is a common pattern in enterprise environments, which is worth.

Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms

Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms

In order to spread a remote access trojan (RAT), threat actors are tricking unsuspecting users into using trojanized gaming utilities that are distributed.

Top 5 this week

Page 155 of 278