Category Security

A five-year-old vulnerability (CVE-2018-9995) in TBK’s DVR camera system was successfully exploited in April 2023, according to Fortinet security researchers. A high-severity flaw stems from an error experienced by the camera when handling a maliciously crafted HTTP cookie. A remote…

A North Korean threat actor known as APT37 has modified its deployment method and used archives containing Windows shortcut (LNK) files to initiate the ROKRAT infection chain, using lures themed on South Korean diplomatic and domestic issues. It has been…

The telecommunications industry has always been an attractive target for cybercriminals. The combination of interconnected networks, customer data, and sensitive information allows cybercriminals to do the most damage with the least amount of effort. Telecom company data breaches tend to…

German IT service provider Bitmarck has confirmed that it has taken all its customers and internal systems offline following a cyberattack uncovered over the weekend. Writing on its temporary website on Sunday (and Monday), the company said the cyberattack was…

May 2, 2023Rabbi LakshmananNetwork Security / Vulnerability Cybersecurity researchers have discovered weaknesses in software implementations of the Border Gateway Protocol (BGP) that can be weaponized to achieve a denial of service (DoS) condition on vulnerable BGP peers. Three vulnerabilities exist…

According to the UK’s Office for National Statistics (ONS), advance payment fraud surged eightfold between the year ending March 2020 and ending December 2022. This is because scammers may have taken advantage of changes in behavior patterns during the pandemic.…

May 2, 2023Rabbi LakshmananMobile Security / Spyware New Android surveillance ware possibly used by the Iranian government is being used to spy on over 300 individuals belonging to minority groups. malware called bold spy, attributed with moderate confidence to the…

After a massive ransomware attack at the end of February, students and teachers in the Minneapolis Public Schools (MPS) school district had highly sensitive information about themselves published on the web, including allegations of abuse by teachers and psychological reports.…

The National Smallbore Rifle Association (NSRA) has warned members of the potential for fraud and cybercrime after their IT systems were compromised. The association is now working with the UK’s South East Regional Organized Cyber ​​Crime Unit (SEROCU) following the…

May 2, 2023Rabbi Lakshmananthreat intelligence North Korean threat actor known as scar craft As early as July 2022, we began experimenting with using oversized LNK files as a delivery route for the RokRAT malware. This is the same month that…