Category Security

July 14, 2023THNMoreCyber ​​Threat / Cloud Security Malicious actors have been implicated in a June 2023 cloud credential theft campaign focused on Azure and Google Cloud Platform (GCP) services, with the attackers targeting Amazon Web Services ( AWS) and beyond.…

WormGPT, a generative AI tool, has emerged as a powerful weapon in the hands of cybercriminals, especially for launching business email compromise (BEC) attacks, according to new findings shared by security firm SlashNext. “We are currently seeing a disturbing trend…

July 14, 2023THNMoreVulnerability/Cyber ​​Threat Multiple security vulnerabilities have been discovered in various services, such as the Honeywell Experion Distributed Control System (DCS) and QuickBlox, which, if successfully exploited, could result in a significant compromise of the affected system. Nine flaws…

Trend Micro has discovered samples of Shadowpad, an advanced backdoor used by various China-backed actors within applications built by the National Information Technology Board (NITB), a government agency of Pakistan. In a study published on July 14, 2023, two threat…

July 14, 2023THNMorePassword Security / WordPress All-In-One Security (AIOS), a WordPress plugin installed on over 1 million sites, had a bug introduced in version 5.1.9 of the software that caused user passwords to be added to the database in plain…

Global financial services institutions have lost more than $32 billion in downtime to ransomware breaches since 2018, according to a new report. Comparitech analyzed 225 confirmed attacks against the sector over the past five years and found that the average…

July 14, 2023hacker newsSaaS security/cyber security As security practices continue to evolve, a key concern remains on the minds of security professionals: the risk of employees unintentionally or intentionally leaking sensitive information. Insider threats, whether stemming from deliberate acts or…

A leading UK security agency has identified several approaches that can reduce or eliminate an organization’s need to run a time- and resource-consuming Security Operations Center (SOC). The SOC is an increasingly important function for security operations (SecOps) teams tasked…

July 14, 2023THNMorenetwork security/malware New malware strain stealthily targets small office/home office (SOHO) routers for over two years, infects over 70,000 devices, and builds a botnet of 40,000 nodes across 20 countries turned out to be Lumen Black Lotus Labs…

Jogging can be bad for privacy (but worse for health), and the UK consumer finance champion found his face faked. All of this and more is covered in the latest edition of the Smashing Security podcast by cybersecurity veterans Graham…