Category Security

June 9, 2023Ravi LakshmananCyber ​​Threat / Financial Security Banks and financial services organizations have been targeted in new multi-stage man-in-the-middle (AitM) phishing and business email compromise (BEC) attacks, Microsoft has revealed. “The attack started with a trusted vendor that was…

The University of Manchester suffered a cyber incident that likely resulted in access to data by attackers, the university confirmed in a statement issued on June 9, 2023. “Some of our systems may have been accessed by unauthorized persons and…

June 9, 2023Ravi LakshmananCyber ​​Crime / APT threat actor known as Asylum Ambuscade Since at least the beginning of 2020, we have observed behavior that spans cybercrime and cyberespionage. “This is a crimeware group targeting banking customers and cryptocurrency traders…

If you look at the URL, you should know that things are serious. Barracuda Networks has submitted a security advisory in the ‘legal’ section And there was a very enthusiastic attempt to highlight the company’s commitment to protecting your…

Barracuda, an enterprise-grade security solutions provider, recommends customers replace their Email Security Gateway (ESG) regardless of patch version level. This follows an observed attack targeting a patched zero-day vulnerability. Defect (tracked) CVE-2023-2868) was exploited in October 2022 and remotely patched…

The way we work has changed dramatically in recent years. We now operate in a digital ecosystem where remote work and reliance on numerous digital tools is the norm rather than the exception. This shift, as you probably know in…

Security researchers have discovered and published details about vulnerabilities that are being actively exploited. microsoft A security flaw in Windows could allow an attacker to gain elevated privileges on an affected system. tracked CVE-2023-29336 With a CVSS severity of 7.8,…

June 9, 2023Ravi LakshmananCyber ​​Spy / APT called a new custom backdoor stealth soldier It was deployed as part of a series of highly targeted spy attacks in North Africa. “The Stealth Soldier malware is an undocumented backdoor that primarily…

Microsoft announced new integrations of OpenAI technology into its services with the goal of providing enhanced insights to US government agencies while prioritizing information security. The integration will allow government agencies to take advantage of the capabilities of the Microsoft…

June 8, 2023hacker newsAPI Security/DevSecOps APIs, formally known as application programming interfaces, allow apps and microservices to communicate and share data. However, this level of connectivity comes with significant risks. Hackers can exploit API vulnerabilities to gain unauthorized access to…