Category Security

Security experts have urged caution after a stream of doom-laden reports in recent days claimed Chinese researchers have cracked military-grade encryption using quantum computing technology. First surfacing in the South China Morning Post last week, the reports are based around…

Oct 16, 2024Ravie LakshmananCyber Attack / Banking Trojan A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript to slip past security guardrails. “The spear-phishing campaign’s impact…

Oct 16, 2024Ravie LakshmananEnterprise Security / Vulnerability GitHub has released security updates for Enterprise Server (GHES) to address multiple issues, including a critical bug that could allow unauthorized access to an instance. The vulnerability, tracked as CVE-2024-9487, carries a CVS…

Security researchers flagged hundreds of fake apps to Google last year, warning that millions of users may have unwittingly infected their devices with malware. Zscaler made the claims in its ThreatLabz 2024 Mobile, IoT, & OT Threat Report, which covers…

Nation-state threat actors have ramped up cooperation with cybercriminals in the past year to advance their political and military goals, according to Microsoft’s Digital Defense Report 2024. The use of cybercriminals by nation-states has served a variety of purposes, including…

Oct 15, 2024Ravie LakshmananFinancial Fraud / Linux North Korean threat actors have been observed using a Linux variant of a known malware family called FASTCash to steal funds as part of a financially-motivated campaign. The malware is “installed on payment…

All UK schools and education service providers can now benefit from a range of free website security services provided by the UK government. The UK’s National Cyber Security Centre (NCSC) announced on October 15 that its Protective Domain Name System…

Oct 15, 2024Ravie LakshmananMobile Security / Financial Fraud New variants of an Android banking trojan called TrickMo have been found to harbor previously undocumented features to steal a device’s unlock pattern or PIN. “This new addition enables the threat actor…

A novel cyber-attack method dubbed ConfusedPilot, which targets Retrieval-Augmented Generation (RAG) based AI systems like Microsoft 365 Copilot, has been identified by researchers at the University of Texas at Austin’s SPARK Lab. The team, led by Professor Mohit Tiwari, CEO…

Oct 15, 2024Ravie LakshmananMalware / Cybercrime Cybersecurity researchers have disclosed a new malware campaign that leverages a malware loader named PureCrypter to deliver a commodity remote access trojan (RAT) called DarkVision RAT. The activity, observed by Zscaler ThreatLabz in July…