Category Security

April 24, 2023hacker newsSaaS security A recent review by Wing Security, a SaaS security company that analyzed data from over 500 companies, revealed some worrisome information. According to the study, 84% of company employees had an average of 3.5 of…

A major U.S. legal trade association was forced to contact individuals who had accounts on the website that their logins may have been compromised. The American Bar Association (ABA) reportedly told 1.5 million people about the breach that occurred last…

CISOs acknowledge that the complexity of siled teams, point solutions, and cloud ecosystems makes it more likely that software vulnerabilities will make it into production. Dynatrace, an observability specialist, surveyed 1,300 global CISOs from large organizations with 1,000+ employees to…

April 24, 2023Rabbi LakshmananThreat Intel / Cyber ​​Attack Print management software provider PaperCut cites two vulnerability reports from cybersecurity firm Trend Micro, citing “evidence that suggests unpatched servers are being exploited in the wild.” said. “PaperCut has conducted an analysis…

April 24, 2023Rabbi LakshmananCyber ​​Risk / Dark Web A new “all-in-one” stealer malware named Evil Extractor (also known as Evil Extractor) is sold to other attackers to steal data and files from Windows systems. Fortinet FortiGuard Labs researcher Cara Lin…

April 22, 2023Rabbi Lakshmananpatch management / vulnerabilities The US Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation. The three vulnerabilities are: CVE-2023-28432 (CVSS…

April 22, 2023Rabbi LakshmananSupply Chain / Cyber ​​Threat Lazarus, the prolific North Korean hacking group behind the cascading supply chain attacks targeting 3CX, used the trojanized X_TRADER application to compromise two critical infrastructures in the power and energy sectors. The…

Popular software tools such as Zoom, Cisco AnyConnect, ChatGPT, and Citrix Workspace have been trojanized to distribute malware known as Bumblebee. Secureworks’ Counter Threat Unit (CTU) analyzed the findings in a report published Thursday and found that the infection chain…

Known as Evil Extractor and developed by a company called Kodex as an “educational tool,” the attack tool is used by attackers to target Windows-based machines. The claim comes from Fortinet security researchers and is explained in an advisory published…

ControlPlane Founder and CEO Andrew Martin recently released a report titled Cloud Native and Kubernetes Security Predictions 2023. These predictions highlight the rapidly evolving landscape of Kubernetes and cloud security, and the need for organizations to stay informed and adopt…