Category Security

Security researchers have discovered a new zero-click, zero-day exploit targeting iPhone users in 2021 using commercial spyware created by Israeli secret company QuaDream. Together, Microsoft and Citizen Labs have unveiled a campaign targeting at least five “victims of civil society”…

April 12, 2023Rabbi LakshmananTuesday patch/software update On the second Tuesday of this month, Microsoft released another series of security updates to fix a total of 97 flaws affecting its software. One of them is being actively exploited in real-world ransomware…

April 12, 2023Rabbi LakshmananSoftware security / cyber attack Enterprise communications service provider 3CX has confirmed that a supply chain attack targeting desktop applications for Windows and macOS was carried out by a threat actor linked to North Korea. The findings…

Only 2% of all exposures allow attackers seamless access to critical assets, while 75% of exposures along attack paths lead to “dead ends”. The findings are from a recent report by XM Cyber ​​that analyzed over 60 million exposures across…

Apple has released updates for two zero-day vulnerabilities used to attack iPhone, iPad, and Mac devices. “Apple is aware of the following reports: [these issues] It may have been actively exploited,” the tech giant wrote in a security advisory published…

April 11, 2023Rabbi LakshmananSoftware Security / Cryptocurrency Cybersecurity researchers delved into the inner workings of a cryptocurrency stealer malware distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. A sophisticated typosquatting campaign, detailed…

Malicious Android apps have been found for sale on the darknet, fetching up to $20,000, according to Kaspersky security researchers. The company described its findings in a post published Monday, saying the team collected examples from nine different darknet forums…

April 11, 2023Rabbi Lakshmananmobile security / malware Malicious loader programs that can trojanize Android applications are being sold by criminal gangs for up to $20,000 as a way to bypass Google Play store defenses. In a new report based on…

April 11, 2023Rabbi LakshmananCloud Security / Data Security “Design flaws” discovered in Microsoft Azure can be exploited by attackers to gain access to storage accounts, lateral movement within the environment, and even remote code execution. “Manipulating Azure Functions to steal…

A major US fast food company has sent out breach notifications to individuals affected by a ransomware incident in January. Yum Brands, which owns KFC, Taco Bell and Pizza Hut, was hit by a ransomware breach around January 13th. A…