Category Security

June 23, 2023Ravi LakshmananThreat Intel / Endpoint Security The U.S. National Security Agency (NSA) released guidance on Thursday to help organizations detect and prevent infections with the Unified Extensible Firmware Interface (UEFI) bootkit, known as: Black Lotus. To this end,…

The UK’s National Cyber ​​Security Center (NCSC) has released updated guidance to help law firms mitigate the latest cyber threats. The sector is worth an estimated £44 billion ($56 billion), employs more than 320,000 people and comprises about 33,000 companies,…

June 23, 2023Ravi LakshmananVirtual currency/IoT Internet-connected Linux systems and Internet of Things (IoT) devices are being targeted as part of a new campaign aimed at illicit cryptocurrency mining. Rotem Sde-Or, a threat intelligence researcher at Microsoft, said, “The attackers behind…

Cybersecurity professionals are being called upon today to fight for a more neuro-inclusive workplace. Dan Harris, CEO of Neurodiversity in Business, speaking on the final day of Infosecurity Europe, asked attendees to embrace the notion of “not different, not less.”…

According to the panel of experts, organizations need a fresh look at their hiring policies, hiring processes and interviewing techniques if they want to address current cyber skills shortages and gaps. The UK currently has a shortfall of around 57,000…

The North Korean government-backed Advanced Persistent Threat (APT) group RedEyes (also known as APT37, ScarCruft, and Reaper) has been observed using sniffing malware to target individuals. The campaign was discovered by the AhnLab Security Emergency Response Center (ASEC) and described…

Drones, also known as unmanned aerial vehicles (UAVs), are employed in a variety of applications. In some cases, multiple drones are controlled simultaneously in swarms via internet service providers, introducing a new paradigm called the Internet of Drones (IoD). The…

June 22, 2023Ravi LakshmananWebsite Security / WordPress A serious security flaw has been revealed in the Abandoned Cart Lite for WooCommerce WordPress plugin installed on over 30,000 websites. “This vulnerability allows attackers to gain access to the accounts of abandoned…

Apple has released a series of updates to its operating system and Safari browser. These patches are intended to address a set of actively exploited vulnerabilities, including two zero-days. Zero-day was reportedly weaponized as part of a mobile surveillance campaign…

June 22, 2023Ravi LakshmananCyber ​​Threat/Malware Chinese cyber espionage known as camaro dragon It has been observed utilizing a new strain of self-propagating malware that spreads via compromised USB drives. “Historically, their main focus has been Southeast Asian countries, but this…