Malware, Patch/Configuration Management, Phishing, Vulnerability Management

Mozilla releases Firefox 14 to close several major holes

July 18, 2012

Mozilla on Tuesday released Firefox version 14.0.1 to patch a slew of vulnerabilities. Five of the 18 bugs fixed are labeled as “critical,” giving attackers the ability to run malicious software. According to Mozilla's Security Advisories post, two of the most concerning flaws were discovered in the “javascript: URL,” which could allow miscreants to evade the JavaScript sandbox to execute malicious code, as well as “JSDependentString,” which may enable attackers to crash the browser and corrupt memory. The remaining vulnerabilities, if not patched, could facilitate the execution of arbitrary code, cross-site scripting and phishing attacks.

[An earlier version of this story incorrectly stated that 14 vulnerabilities were patched, when it was actually 18].

Marcos Colón

Crypto Trading theme with blurred city abstract lights background

Malware

Clipper malware intrusions against crypto users escalate

SC StaffSeptember 18, 2024

Intrusions with the malicious payload, which compromises cryptocurrency wallet addresses by intercepting clipboard data, peaked in late August, according to a new advisory from Binance, which noted clipper malware distribution via unofficial Android and web apps and plugins.

Privacy concept: pixelated words Malware on digital background, 3d render

Network Security

Windows MSHTML spoofing bug leveraged in Void Banshee attacks

SC StaffSeptember 17, 2024

BleepingComputer reports that information-stealing malware attacks have been conducted by advanced persistent threat operation Void Banshee through the exploitation of the recently addressed Windows MSHTML spoofing zero-day vulnerability, tracked as CVE-2024-43461.

Malware

Central Asia subjected to Ajina.Banker Android malware intrusions

SC StaffSeptember 16, 2024

Numerous social engineering tactics have been leveraged by threat actors to deploy Ajina.Banker, including fake banking, government, and utility apps, as well as malicious links purporting to be for promotions or offers spread via Telegram, a report from Group-IB revealed.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news