Category Security

April 3, 2023Rabbi LakshmananAmerica Part of a new information-stealing malware called option jacker It has been spotted in the wild since late 2022 as part of a malvertising campaign. “OpcJacker’s main functions include keylogging, taking screenshots, exfiltrating sensitive data from…

Dish Network investors have filed multiple class-action lawsuits alleging pay-TV providers made “materially false and misleading statements” about their cybersecurity posture. The lawsuit concerns investors who acquired the company’s securities between February 22, 2021 and February 27, 2023. For more…

Business process outsourcing giant Capita today claimed that Friday’s “cyber incident” was largely contained and services were being restored. In a brief statement, the London-based company acknowledged that the incident primarily affected internal access to Microsoft 365 applications, resulting in…

April 1, 2023Rabbi LakshmananAzure / Active Directory Microsoft has patched a misconfiguration issue affecting the Azure Active Directory (AAD) identity and access management service. This exposed several “high impact” applications to unauthorized access. “One of these apps is the content…

April 1, 2023Rabbi LakshmananWeb security / cyber threats An unknown attacker is actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress. This vulnerability is described as a case of broken access control and…

April 1, 2023Rabbi LakshmananCyber ​​attack/vulnerability Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex have been exploited by various attackers in hacks targeting unpatched systems. This requires exploiting CVE-2022-46169 (CVSS score: 9.8) and CVE-2021-35394 (CVSS score: 9.8) to deliver…

A new malware toolset was discovered and analyzed by SentinelOne security experts. Dubbed “AlienFox” by the team, the toolkit can collect credentials for multiple cloud services his providers. SentinelOne threat researcher Alex Delamotte published an advisory Thursday that said attackers…

The Italian data protection authority (Garante per la protezione dei dati personali) has temporarily suspended the use of the artificial intelligence (AI) service ChatGPT in the country. A privacy watchdog has launched an investigation into OpenAI’s chatbot and blocked its…

March 31, 2023Rabbi LakshmananCyber ​​Spy / APT Advanced Persistent Threat (APT) actor known as bevern in winter It targets European and US officials as part of an ongoing cyber espionage campaign. In a new report, Proofpoint states, “Since at least…

A new vulnerability has been discovered in Microsoft’s Azure Service Fabric Explorer (SFX) that allows unauthenticated, remote attackers to execute code in containers hosted on Service Fabric nodes. A cross-site scripting (XSS) flaw (CVE-2023-23383), dubbed Super FabriXss by the Orca…