A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials. […] Read More
Related Posts
Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability
Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability
[[{“value”:”Details have emerged about a now-patched high-severity security flaw in Apple’s Shortcuts app that could permit a shortcut to access sensitive information on the device without users’ consent.
The vulnerability, tracked as CVE-2024-23204 (CVSS score: 7.5), was addressed by Apple on January 22, 2024, with the release of iOS 17.3, iPadOS 17.3, macOS Sonoma 14.3, and ”}]] Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Ukraine at D+674: FSB’s LitterDrifter.
Ukraine at D+674: FSB’s LitterDrifter.
Privateers and hacktivist auxiliaries hit targets of opportunity connected with strategic objectives. Ukraine investigates cyber operations in support of alleged war crimes. Dissent and repression inside Russia. Read More
The CyberWire
Do You Really Trust Your Web Application Supply Chain?
Do You Really Trust Your Web Application Supply Chain?
Well, you shouldn’t. It may already be hiding vulnerabilities.
It’s the modular nature of modern web applications that has made them so effective. They can call on dozens of third-party web components, JS frameworks, and open-source tools to deliver all the different functionalities that keep their customers happy, but this chain of dependencies is also what makes them so vulnerable.
Many of Read More
The Hacker News | #1 Trusted Cybersecurity News Site