💻🔒 Cybercriminals are leveling up! Phishing campaigns now exploit GitHub links, Telegram bots, and even QR codes to bypass security and deliver malware.

Read: https://thehackernews.com/2024/10/github-telegram-bots-and-qr-codes.html

Show HN: I made a URL expander because short links are too mainstream
Article, Comments

Bug, $50k how Zendesk left a backdoor in Fortune 500 companies
Article, Comments

PayPal will automatically share data about you to participating stores
Article, Comments

Heart rate variability differs between smartwatch and clinical testing
Article, Comments

Chrome for Android: Google is moving the address bar to the bottom
https://www.gizchina.com/2024/10/13/chrome-for-android-google-is-moving-the-address-bar-to-the-bottom/

Sometimes it could be a good idea to try uncommon options for coding 😎

https://news.itsfoss.com/kate-editor/

🔥 FBI created its own cryptocurrency token, NexFundAI, to bust widespread market manipulation. Several market makers are charged with wash trading and a pump-and-dump scheme.

Read: https://thehackernews.com/2024/10/fbi-creates-fake-cryptocurrency-to.html

Iranian threat actor OilRig is exploiting a Windows Kernel #vulnerability (CVE-2024-30088) to gain SYSTEM privileges, enabling backdoor deployment and data theft.

Learn how to protect your systems now https://thehackernews.com/2024/10/oilrig-exploits-windows-kernel-flaw-in.html

Veeam Backup flaw targeted for ransomware attacks—CVE-2024-40711 exploited!

This flaw allows attackers to create local admin accounts, granting them full control to deploy ransomware like Akira and Fog.

Learn how to defend against active threats: https://thehackernews.com/2024/10/critical-veeam-vulnerability-exploited.html

🚨 Researchers warn of entry-point vulnerabilities in ecosystems like PyPI & npm, enabling software supply chain attacks.

Command-jacking lets attackers harvest sensitive data using counterfeit packages & system command hijacking.

Read: https://thehackernews.com/2024/10/supply-chain-attacks-exploit-entry.html

Nation-state attackers are exploiting Ivanti CSA vulnerabilities, including zero-days, to breach and patch networks, locking out competitors.

Is your CSA secure? Stay proactive—read the report and tighten your patching strategy.

Read: https://thehackernews.com/2024/10/nation-state-attackers-exploiting.html

Meshenger - P2P Voice/Video phone App for local networks.

Direct voice- and video phone calls. No need for accounts or access to the Internet. Just scan each others QR-Code that will contain the contacts IP address. This works at home or company networks but also in many off-the-grid networks such as community mesh networks.

🔗 Links:
- Download from: Github, Play or F-Droid
- Screenshots
- Features
- Limitations
- Source Code

🌐 @popmodsnetwork
🎁 Donate to our admins
🏷 Tags: #Android #Utilities