New Magecart attacks involving the alteration of default 404 error pages to hide malicious code have been deployed against numerous Magento and WooCommerce sites, including those of food and retail industry entities, The Hacker News reports.

In the Security News: Windows 11 tries to fix legacy authentication, Rapid resets and the world’s largest DDoS attack, we finally get to see the cURL vulnerability, and its pretty ugly, turns out Android TV boxes with pre-installed malware are a hot topic, patch your Netscaler, root for everyone with emergency responder software, learn THIS hacking...

This week Aaran Leyland rants: about Google, 23andMe, Facebook, GitHub's Secret Scanning, MGM Resorts, Grindr, More News, and is joined by the notorious Jason Wood on the Security Weekly News!

More than 70,000 low-cost Android smartphones, tablets, and connected TV devices from one or more Chinese manufacturers have been compromised by the Badbox cybercriminal operation with the Triada malware prior to being sold to consumers, reports SecurityWeek.

Two U.S. congressmen, EU officials, the German ambassador to the U.S. and the president of Taiwan were targeted – but not necessarily infected – by the Predator spyware.

TechCrunch reports that mobile spyware Oospy, which emerged in July as a rebranded Spyhide phone monitoring app, has ended operations after its back-end server, which contained thousands of Android devices' data, was shut down due to terms of service violations by web host Hetzner.

Vietnamese banking apps hit by novel GoldDigger Android trojan Over 50 Vietnamese banking, cryptocurrency wallet, and e-wallet applications have been targeted in attacks involving the new GoldDigger Android banking trojan since June, reports The Hacker News.

ReversingLabs points out that these type of malicious supply chain attacks are now available to low-skill threat actors and script kiddies.