Category Security

Jan 21, 2025Ravie LakshmananMalware / Cyber Threat The Computer Emergency Response Team of Ukraine (CERT-UA) is warning of ongoing attempts by unknown threat actors to impersonate the cybersecurity agency by sending AnyDesk connection requests. The AnyDesk requests claim to be…

Customers of some of the world’s best-known hotel chains have had their personal information compromised after a threat actor targeted an industry software supplier, it has emerged. The threat actor appears to have gained unauthorized access to hotel management software…

A malicious Android application disguised as a chat platform has been linked to the Indian Advanced Persistent Threat (APT) group DONOT, which specializes in intelligence gathering. The connection, made by researchers at Cyfirma, highlights the group’s continued efforts to collect…

Jan 20, 2025Ravie LakshmananAndroid / Malware The Threat actor known as DoNot Team has been linked to a new Android malware as part of highly targeted cyber attacks. The artifacts in question, named Tanzeem (meaning “organization” in Urdu) and Tanzeem…

Hewlett Packard Enterprise (HPE) has launched an investigation into claims by prominent hacker, IntelBroker, who alleges to have stolen sensitive data from the tech giant. The hacker announced on January 16 on BreachForums that they are selling files purportedly taken from…

Jan 20, 2025Ravie LakshmananNetwork Security / Vulnerability New research has uncovered security vulnerabilities in multiple tunneling protocols that could allow attackers to perform a wide range of attacks. “Internet hosts that accept tunneling packets without verifying the sender’s identity can…

The infrastructure of Ukraine’s state registers has been fully restored following a large-scale cyber-attack which was attributed to Russia’s military intelligence services (GRU). Olga Stefanishyna, the Ukrainian Minister of Justice and Deputy Prime Minister for European and Euro-Atlantic Integration of…

Every week seems to bring news of another data breach, and it’s no surprise why: securing sensitive data has become harder than ever. And it’s not just because companies are dealing with orders of magnitude more data. Data flows and…

The US has sanctioned Chinese state cyber actors over the recent compromises of the Department of the Treasury and multiple telecoms providers, respectively. Shanghai-based Yin Kecheng was involved in the hack of US Treasury computers via third-party cybersecurity vendor BeyondTrust…

Jan 20, 2025Ravie Lakshmanan As the digital world becomes more complicated, the lines between national security and cybersecurity are starting to fade. Recent cyber sanctions and intelligence moves show a reality where malware and fake news are used as tools…