Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, …
The Service Accounts Challenge: Can’t See or Secure Them Until It’s Too Late
Here’s a hard question to answer: ‘How many service accounts do you have in your environment?’. A harder one is: ‘Do you know what these …
Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit
Apr 12, 2023Ravie LakshmananPatch Tuesday / Software Updates It’s the second Tuesday of the month, and Microsoft has released another set of security updates to …
North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack
Apr 12, 2023Ravie LakshmananSoftware Security / Cyber Attack Enterprise communications service provider 3CX confirmed that the supply chain attack[1] targeting its desktop application for Windows …
Newly Discovered “By-Design” Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers
Apr 11, 2023Ravie LakshmananCloud Security / Data Security A “by-design flaw” uncovered in Microsoft Azure could be exploited by attackers to gain access to storage …
Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security
Apr 11, 2023Ravie LakshmananMobile Security / Malware Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to …
[eBook] A Step-by-Step Guide to Cyber Risk Assessment
Apr 11, 2023The Hacker NewsCybersecurity / Guide In today’s perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including …
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Apr 11, 2023Ravie LakshmananSoftware Security / Cryptocurrency Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious …
Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military
Apr 10, 2023Ravie LakshmananHacking Tool / Cyber Threat An Estonian national has been charged[1] in the U.S. for purchasing U.S.-made electronics on behalf of the …
Hackers Flood NPM with Bogus Packages Causing a DoS Attack
Apr 10, 2023Ravie LakshmananSoftware Security / JavaScript Threat actors are flooding the npm open source package repository with bogus packages that briefly even resulted in …
