WhatsApp GhostPairing attacks let hackers hijack accounts using device-linking, exposing messages and media while bypassing authentication completely.
…
I’ve rounded up ESET deals on Essentials, Premium, and Ultimate.
Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more.
Stay safe this Christmas – be on the lookout for these scams.
From photos of former president Bill Clinton to images of strange scrapbooks, the Justice Department’s release is curious but far from revelatory.
Payroll-focused social engineering attacks target help desk staff, redirect employee salaries, and show how human factors can bypass traditional technical protections.
…
SantaStealer is a rebranded infostealer using modular data theft, modest pricing, and limited stealth, with no confirmed large-scale deployment yet.
…
Several hundred machines across a diverse set of organizations already compromised, Microsoft says.
Cisco warned that Chinese government hackers are exploiting a zero-day in some of its products. Researchers now say there are hundreds of vulnerable Cisco customers.
Two Chinese-nexus groups have been exploiting a newly discovered flaw to establish persistence and launch backdoors.
…