Mozilla rolling out Firefox 92 updates

Mozilla has begun pushing out Firefox 92.0 updates. The update is currently available to a limited number of users. It adds new features, fixes bugs, improves performance, and more.  …

Microsoft releases updates for Windows zero-day: PrintNightmare

The KB5004945 emergency security update from Microsoft addresses the actively exploited PrintNightmare zero-day vulnerability in the Windows Print Spooler service, which affects all versions of Windows.   The patch, however,…

Microsoft warns of data stealing malware (StrRAT Fake-Ransomware RAT)

Microsoft has issued an alert about a “massive email campaign” that uses the Java-based STRRAT malware to steal sensitive data from compromised systems while masquerading as a ransomware infection.  …

E-commerce giant Mercari data breach: several data exposed

Mercari, an e-commerce platform, has revealed a significant data breach that occurred as a result of the Codecov supply-chain attack.   Mercari is a publicly listed Japanese online marketplace that…

Air India Data Breach: Over 4.5 million customers’ data impacted

Following the hack of Passenger Service System provider SITA in February 2021, Air India revealed a data breach that exposed the personal details of about 4.5 million of its customers.…

Microsoft Edge blocks Firefox installer: Report

Microsoft Defender SmartScreen is a feature of the company’s Edge browser that analyses unknown files downloaded from the internet before allowing them to be run on a computer.   Though…

Beware: Foxit Reader bug allows hackers run malicious code via PDFs

Foxit Software has released security updates for its widely used Foxit reader to fix a high-severity remote code execution (RCE) vulnerability.   As a result of this security vulnerability, attackers…

Moriya Windows rootkit exploited in wild for highly targeted attacks

Unknown threat actors have been using a Windows rootkit to install backdoors on compromised machines for years.   According to Kaspersky’s Operation TunnelSnake campaign (active since 2018), an advanced persistent…