Category Security

Trend Micro has discovered samples of Shadowpad, an advanced backdoor used by various China-backed actors within applications built by the National Information Technology Board (NITB), a government agency of Pakistan. In a study published on July 14, 2023, two threat…

July 14, 2023THNMorePassword Security / WordPress All-In-One Security (AIOS), a WordPress plugin installed on over 1 million sites, had a bug introduced in version 5.1.9 of the software that caused user passwords to be added to the database in plain…

Global financial services institutions have lost more than $32 billion in downtime to ransomware breaches since 2018, according to a new report. Comparitech analyzed 225 confirmed attacks against the sector over the past five years and found that the average…

July 14, 2023hacker newsSaaS security/cyber security As security practices continue to evolve, a key concern remains on the minds of security professionals: the risk of employees unintentionally or intentionally leaking sensitive information. Insider threats, whether stemming from deliberate acts or…

A leading UK security agency has identified several approaches that can reduce or eliminate an organization’s need to run a time- and resource-consuming Security Operations Center (SOC). The SOC is an increasingly important function for security operations (SecOps) teams tasked…

July 14, 2023THNMorenetwork security/malware New malware strain stealthily targets small office/home office (SOHO) routers for over two years, infects over 70,000 devices, and builds a botnet of 40,000 nodes across 20 countries turned out to be Lumen Black Lotus Labs…

Jogging can be bad for privacy (but worse for health), and the UK consumer finance champion found his face faked. All of this and more is covered in the latest edition of the Smashing Security podcast by cybersecurity veterans Graham…

Microsoft has uncovered another Chinese cyber espionage operation that compromised at least 25 organizations, including the US government. The tech giant began investigating suspicious email activity following a customer report on June 16. It was later discovered that a Chinese…

July 13, 2023THNMoreCloud Security/Cryptocurrency As many as 196 hosts were infected as part of an aggressive cloud campaign staged by the TeamTNT group. silent bob. Ofek Itach and Assaf Morag, security researchers at Aqua, said, “The botnet operated by TeamTNT…

Mandiant has used a trail of destructive Russian-backed operations against Ukraine since February 2022 to invade neighboring Ukraine, with multiple different Russian threat clusters to pursue Russia’s intelligence-conflict objectives. observed the persistent use of the same repeatable strategy throughout the…