Check Point identified a vulnerability in LinkedIn’s messenger service whereby an attacker could exploit and then spread malicious files masquerading as a resume or other legitimate files (such as doc, xls, ppt files).
A hacker going by the name of xerub claims to have published the decryption key that could be used to unlock the Apple iOS’ Secure Enclave Processor (SEP) firmware.
Hackers allegedly linked to Russian actor APT28 may be linked to a campaign targeting travelers in hotels in Europe and the Middle East, with activity dating back to July 2017.
The Department of Justice (DOJ) Criminal Division Cybersecurity Unit has developed a framework to assist organizations interested in creating a formal vulnerability disclosure program.
WikiLeaks has detailed three leaked hacking tools, Achilles, Aeris and SeaPea, used to target Mac OS X and POSIX systems.