Category Security

The new head of the UK’s National Crime Agency (NCA) has warned that hostile states are increasingly cooperating with organized cybercrime groups. Graham Bigger made the comments as part of his first public address as the agency’s secretary to initiate…

July 19, 2023THNMorespyware/mobile security A prolific China-linked nation-state actor known as APT41 has been linked to two previously undocumented types of Android spyware called WyrmSpy and DragonEgg. “Established threat actors like APT 41, known for exploiting web-enabled applications and infiltrating…

College students are being warned to be vigilant after researchers uncover a new scam campaign based on fake job listings. According to Proofpoint, the campaign will begin in March 2023 and run through June, targeting primarily North American students with…

July 19, 2023THNMoreCloud security/vulnerabilities Cybersecurity researchers have discovered a privilege escalation vulnerability in Google Cloud. This vulnerability could allow malicious attackers to modify application images to infect users, leading to supply chain attacks. This problem, Bad. BuildAccording to cloud security…

Norwegian recycling and mining multinational Tomra has revealed that some “data systems” were directly affected by a “massive” cyberattack. In a brief statement, the company said it discovered the breach on the morning of July 16th. “We quickly disconnected some…

July 19, 2023THNMoreCyber ​​espionage / spyware The U.S. government on Tuesday accused two foreign commercial spyware vendors, Cytrox and Intellexa, of using cyber exploits to gain unauthorized access to devices and “threat the privacy and security of individuals and organizations…

July 19, 2023THNMoreVulnerability / Cyber ​​Threat Citrix is ​​warning users that its NetScaler Application Delivery Controller (ADC) and gateway have serious security flaws that are being exploited in the wild. tracked CVE-2023-3519 (CVSS score: 9.8), this issue is related to…

A former IT security analyst has been sentenced to three years and seven months in prison for attempting to blackmail his employer, according to British police. Ashley Lyles, 28, of Fleetwood, Letchworth Garden City, was found guilty of unauthorized computer…

Threat actors have extensively used a sophisticated web injection kit called drIBAN to orchestrate malicious attacks against corporate banking institutions and their customers. According to the new Recommendation drIBAN was first discovered in 2019 by Clafy security researchers. drIBAN uses…

Security researchers at Rapid7 have discovered multiple vulnerabilities being actively exploited in Adobe ColdFusion, a web development computing platform. On July 11, 2023, Adobe released an access control bypass vulnerability (CVE-2023-29298) found in Rapid7, as well as an insecure deserialization…