Category Security

Jan 17, 2025Ravie LakshmananWeb Security / Botnet Cybersecurity researchers have exposed a new campaign that targets web servers running PHP-based applications to promote gambling platforms in Indonesia. “Over the past two months, a significant volume of attacks from Python-based bots…

Russian nation-state group Star Blizzard has been targeting WhatsApp accounts, with the group shifting its focus following a law enforcement takedown of its infrastructure. Microsoft Threat Intelligence observed Star Blizzard undertake a social engineering campaign in mid-November 2024. This new…

Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face increasing pressure to protect their networks while providing convenient access to visitors, contractors, temporary staff, and employees with BYOD. Implementing…

For Anne, a French woman in her fifties, things began innocently enough in early 2023. The interior designer, who had no experience with social media, opened an Instagram account and began posting holiday snaps. While browsing the site, she saw…

The EU’s Digital Operational Resilience Act (DORA) is here. The new legislation officially entered into force on January 17, 2025, and organizations falling under DORA’s scope can now face substantial penalties for non-compliance. The legislation aims to enhance cyber resilience in…

Austrian privacy non-profit None of Your Business (noyb) has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users’ data to China. The advocacy group…

Cybercriminals are deploying novel techniques to bypass email security, including embedding malicious code inside images and using GenAI to deliver malware. HP Wolf researchers highlighted several novel campaigns utilizing these approaches in the firm’s Q3 2024 Threat Insights Report. The…

Jan 16, 2025Ravie LakshmananMalware / Ransomware Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. “In both campaigns, attackers hid malicious code in images…

Compliance with the EU’s new Digital Operational Resilience Act (DORA) and the UK’s Prudential Regulation Authority (PRA) has cost many businesses more than €1m ($1.02m) over the last 24 months, according to findings by Rubrik Zero Labs. Financial services and banking…

Jan 16, 2025Ravie LakshmananActive Directory / Vulnerability Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that’s designed to disable NT LAN Manager (NTLM) v1 can be trivially bypassed by a misconfiguration. “A simple misconfiguration in on-premise applications…