Two UK police have been reprimanded by the country’s data protection regulator after secretly recording over 200,000 calls with victims, witnesses and suspected perpetrators of crimes. The Information Commissioner’s Office (ICO) said Surrey Police and Sussex Police could face fines…
April 19, 2023Rabbi LakshmananCyber Threat / SCADA Iranian government-backed actor known as mint sand storm Associated with attacks targeting critical infrastructure in the United States from late 2021 to mid-2022. “This Mint Sandstorm subgroup is technically and operationally mature, capable…
April 19, 2023Rabbi LakshmananSandbox / Software Security A new patch for the vm2 JavaScript library is now available to address two critical flaws that can be exploited to break sandbox protection. Both flaws CVE-2023-29199 and CVE-2023-30547 are rated 9.8 out…
The UK’s National Cyber Security Center (NCSC) has revealed that the first iteration of its new SME advisory scheme will focus on driving adoption of its best practice Cyber Essentials programme. The GCHQ Agency said more than 20 certified providers…
Cloud security teams fail to respond quickly to alerts, exposing organizations to potentially heightened cyber risks every day, warns a new Palo Alto Networks report. Security vendors monitored tens of thousands of sensors deployed across different cloud service providers (CSPs),…
An Iranian government-backed threat actor known as MuddyWater has been observed using the legitimate SimpleHelp remote support software tool to bring persistence to victim devices. A new advisory by Group-IB states that the software used as part of these attacks…
Security researchers have discovered a new malicious software library that can collect lists of installed applications, historical Wi-Fi and Bluetooth device information, and nearby GPS location data. The library, dubbed Goldoson by McAfee’s Mobile Research Team, can also load web…
Rapid technological evolution requires security that is resilient, up to date and adaptable. In this article, we will cover the transformation in the field of DFIR (digital forensics and incident response) in the last couple years, focusing on the digital…
Users in multiple countries have been affected by spyware associated with NSO Group’s Pegasus malware over the past six months. Research by Jamf Threat Labs suggests that the observed attacks were highly targeted, with each scenario producing a unique indicator…
April 18, 2023Rabbi LakshmananThreat Intelligence / Cyber Risk A cybersecurity researcher said, “in2al5d p3in4er” (read: disabled printer) Used to deliver the Aurora information stealer malware. “The in2al5d p3in4er loader is compiled with Embarcadero RAD Studio and uses advanced anti-VM (virtual…
All Rights Reserved. Kowatek Blog by IWUCHI
Home | About Us | Disclaimer | Privacy Policy | Contact Us
