Recent data breaches spanning CircleCI, LastPass, and Okta highlight common themes. Enterprise SaaS stacks connected to these industry-leading apps can be at serious risk of compromise. CircleCI, for example, plays an integral SaaS-to-SaaS role in SaaS app development. Similarly, tens…
Two UK police have been reprimanded by the country’s data protection regulator after secretly recording over 200,000 calls with victims, witnesses and suspected perpetrators of crimes. The Information Commissioner’s Office (ICO) said Surrey Police and Sussex Police could face fines…
April 19, 2023Rabbi LakshmananCyber Threat / SCADA Iranian government-backed actor known as mint sand storm Associated with attacks targeting critical infrastructure in the United States from late 2021 to mid-2022. “This Mint Sandstorm subgroup is technically and operationally mature, capable…
April 19, 2023Rabbi LakshmananSandbox / Software Security A new patch for the vm2 JavaScript library is now available to address two critical flaws that can be exploited to break sandbox protection. Both flaws CVE-2023-29199 and CVE-2023-30547 are rated 9.8 out…
The UK’s National Cyber Security Center (NCSC) has revealed that the first iteration of its new SME advisory scheme will focus on driving adoption of its best practice Cyber Essentials programme. The GCHQ Agency said more than 20 certified providers…
Cloud security teams fail to respond quickly to alerts, exposing organizations to potentially heightened cyber risks every day, warns a new Palo Alto Networks report. Security vendors monitored tens of thousands of sensors deployed across different cloud service providers (CSPs),…
An Iranian government-backed threat actor known as MuddyWater has been observed using the legitimate SimpleHelp remote support software tool to bring persistence to victim devices. A new advisory by Group-IB states that the software used as part of these attacks…
Security researchers have discovered a new malicious software library that can collect lists of installed applications, historical Wi-Fi and Bluetooth device information, and nearby GPS location data. The library, dubbed Goldoson by McAfee’s Mobile Research Team, can also load web…
Rapid technological evolution requires security that is resilient, up to date and adaptable. In this article, we will cover the transformation in the field of DFIR (digital forensics and incident response) in the last couple years, focusing on the digital…
Users in multiple countries have been affected by spyware associated with NSO Group’s Pegasus malware over the past six months. Research by Jamf Threat Labs suggests that the observed attacks were highly targeted, with each scenario producing a unique indicator…
All Rights Reserved. Kowatek Blog by IWUCHI
Home | About Us | Disclaimer | Privacy Policy | Contact Us
