Attack Campaign Targets Linux Servers to Install New SpeakUp Trojan
Security researchers observed an attack campaign that is targeting Linux servers to install samples of the new SpeakUp Trojan.
NRSMiner Crypto-Mining Malware Infects Asian Devices With the Help of EternalBlue Exploit
Security researchers report that the newest version of NRSMiner crypto-mining malware is causing problems for companies that haven't patched the EternalBlue exploit.
New Variant of Mirai Malware Exploits Weak IoT Device Passwords to Conduct Brute-Force Attacks
Security researchers discovered a new variant of Mirai malware known as Miori that is targeting internet of things (IoT) devices to integrate into a larger botnet.
Researchers Find 18 Security Vulnerabilities in Foxit PDF Reader
A free browser plugin for creating, editing and viewing PDF files contains 18 security vulnerabilities that could expose users to remote code execution.
Thermal Security Camera Flaws Could Let Cybercriminals Launch Remote Attacks
Cybercriminals could launch remote attacks through thermal security camera vulnerabilities. The flaw, first found in FLIR, could also expose other systems.
Google Patches Critical Android Vulnerabilities
Google recently disclosed 138 Android vulnerabilities, including media framework issues that could enable attackers to execute arbitrary code remotely.
DVRs Prove IoT Malware Is Still Dangerous
With its study of over 30 types of devices, U.K. security firm Pen Test Partners concluded that DVRs remain a major IoT malware platform.
Subtitles Present New Opportunity for Remote Code Execution Across 200 Million Streaming Players
Researchers found that remote code execution attacks could occur via malicious subtitles used in many popular streaming video players.
Microsoft Update Fixes Remote Code Execution Vulnerability
The most recent Microsoft update addresses a flaw in the Microsoft Malware Protection Engine that could enable attackers to commit remote code execution.
Linux Update Fixes 11-Year-Old Flaw
A recent Linux update patched a vulnerability that enabled fraudsters to use heap spraying methods to execute arbitrary code and escalate permissions.