Attackers are actively exploiting two flaws in unpatched Cisco Secure Firewall Management Center software. Organizations using FMC could face stolen credentials, persistent network access and ransomware deployment.
Windows users with Sogou Input Method should update it promptly after attackers exploited a critical flaw through crafted links. A victim only had to click once for the attack to run code with their current Windows account permissions.
A critical Sogou Input Method flaw allowed attackers to run code after a Windows user clicked a crafted link. Gen Threat Labs says the weakness affected software installed hundreds of millions of times and was exploited in real attacks.
Cisco Talos says a campaign is tricking cryptocurrency users into adding malicious JavaScript to Chrome under the promise of higher trading payouts. The code can replace legitimate deposit addresses with wallets controlled by the attackers.
Kaspersky says the financially motivated Toy Ghouls group has begun using a custom Windows backdoor in attacks on Russian organizations. A backdoor is malware that gives attackers remote access; in this case, it can collect system details, run com…
A ClearFake campaign is using fake Google CAPTCHA prompts to trick Windows users into running commands that install the Amatera information stealer. Cisco Talos found related activity at a Ukrainian government organization, but assesses with moder…