Morphisec exposes a LuaJIT XLoader infostealer campaign. Learn how the XLoader infostealer abuses JScript and shared-section injection.

Related Posts:

• BITTER PapRAT Malware Targets South Asian Organizations
• Apple Mercenary Spyware Threat Prompts Global Alerts
• Hugging Face Malware Campaign Infects AI GPU Servers

The post LuaJIT XLoader Infostealer Spreads via Fake Orders appeared first on Daily CyberSecurity.

Sansec uncovers a Convertr supply chain attack. See how a Plausible Convertr supply chain attack planted a Magecart card and CPF skimmer on stores.

Related Posts:

• Attackers Abuse Claude Sharing Features and Google Ads to Deliver AMOS and Windows RAT
• SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft
• Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

The post Brazilian Magecart Group Hits Convertr Ecommerce Platform in Plausible Analytics Supply Chain Attack appeared first on Daily CyberSecurity.

VUSec released details and PoC code for Branch Target Reuse, a Spectre-v2 attack on JIT engines that leaked Linux root password hashes. Patch now.

Related Posts:

• Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
• TeamViewer Fixes Five High-Severity Flaws in Full Client and Host
• Electron Fixes Five High-Severity Sandbox and Isolation Vulnerabilities

The post Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released appeared first on Daily CyberSecurity.

NLnet Labs patched critical Unbound DNS vulnerabilities. Upgrade now to fix Unbound DNS vulnerabilities and block remote code execution attacks.

Related Posts:

• Linux Kernel Vulnerabilities Exploited in the Wild
• Synology DSM Patches 8 Flaws, Two Critical Unauthenticated
• Critical HCL BigFix Vulnerabilities Expose Admin Accounts

The post Unbound DNS Vulnerabilities Expose Resolvers to RCE appeared first on Daily CyberSecurity.