Apple patches CoreGraphics flaw linked to possible targeted attacks
Image: Primary
Image: Primary
Apple released HomeView Software Version 27.2 on November 12, fixing nine security vulnerabilities before the first devices reach customers tomorrow. The update includes a fix for a flaw that could let a remote attacker join an iMessage group chat and receive its messages.
Attackers have compromised at least 21 production N-able N-central servers through a newly disclosed exploit chain, security company Huntback told BleepingComputer. Nineteen ran the latest Hotfix 2 release, issued November 10. The attacks installed XMRig cryptocurrency miners.
Aikido researchers confirmed that a campaign using 4,837 compromised GitHub accounts stole secrets from at least 1,835 targets, BleepingComputer reported.
Humble Bundle's redesigned storefront no longer offers settings to add or update two-factor verification methods, The Verge reported. The change removes account-security controls that were available on the previous site.
Researchers identified a malware toolkit called SCKit in ScreenConnect attacks that compromised at least 288 endpoints across 48 organizations, BleepingComputer reported.
Scammers are sending fake SafePal letters to Italian customers' homes using names, addresses and order details exposed in an earlier breach. SafePal confirmed the campaign on Thursday and linked it to its August data incident.