Distributed Workforce

Recently identified Android spyware DragonEgg previously linked to Chinese state-sponsored threat operation APT41 has been associated with the iOS surveillance tool LightSpy due to similar configuration patterns, command-and-control server communications, and runtime structure and plugins, The Hacker News reports.

Numerous improvements are being considered to be implemented by Google and Yahoo to curb spam emails and bulk senders in their respective email clients, reports The Record, a news site by cybersecurity firm Recorded Future.

C-level staff working across a range of industries were lured to phishing sites via redirect links purportedly from the popular Indeed job-search site.

Obfuscation tactics to bypass security system detection have been implemented in 55.2% of phishing emails from January to September 2023, representing a 24.4% increase over the same period last year, SiliconAngle reports.

Three of six zero-day flaws in the Exim mail transfer agent have been fixed with the release of new security patches, reports BleepingComputer.

Trend Micro’s Zero Day Initiative says Exim zero-days leave organizations open to an remote code execution attack.

CyberScoop reports that millions of files that may have sensitive information have been exposed by 314,000 internet-connected devices and servers with open directory listings, indicating potential significant exploitation.