Tech News

A researcher at security firm Check Point has found a new multi-platform malware called “FreakOut” that targets Linux systems and has the potential to ensnare routers and IoT devices. FreakOut uses several methods to spread, including brute-forcing SSH credentials, exploiting known vulnerabilities like the recent Zerologon flaw, and infecting a critical VMware product. Once infecting […]

A popular password manager, LastPass, has recently fixed a bug that could have enabled malicious websites to steal users’ passwords or even execute arbitrary code on their computers. The bug was first discovered by Tavis Ormandy, a security researcher from Google’s Project Zero. Ormandy found that the vulnerability existed in the Google Chrome and Firefox extensions for the password manager.

A database that belongs to “NextMotion” has been breached, with around 2.3 million sets of patient before and after photos compromised. NextMotion is a French plastic surgery web application firm that enables medical practitioners to enhance patient experience by allowing them to see what they would look like after cosmetic procedures. The database leak has put confidential information about countless individuals at risk, including pictures that portray people’s faces, breasts, and genitalia. 

According to a recent report, a new botnet is spreading cryptomining malware and has already infected over 20,000 Linux machines. Dubbed “Lucky,” this botnet primarily targets IoT (Internet of Things) devices and Linux servers. Researchers say the botnet uses a method called “brute-force” to gain access to vulnerable devices, which means it tries numerous combinations

A critical remote code execution flaw impacting various Cisco switches has been discovered and fixed. The zero-day found resides in the Cisco IOS embedded packet manager daemon, which provides support for features such as quality of service, access control lists, and routing protocols. According to researchers, the flaw allows an attacker to execute code on