The Lazarus Group has been compromising vulnerable IIS servers in an ongoing campaign.
The Apple vulnerabilities (CVE-2023-32409, CVE-2023-28204 and CVE-2023-32373) exist in WebKit.
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Researchers said that it "is difficult to measure" the potential long-term impact of TurkoRat infections on developer systems.
Researchers warn that a Go-based implementation of Cobalt Strike beacons, called "Geacon," is lucrative for threat actors in attacks targeting macOS.