Category Security

Security researchers have uncovered a new Iranian government-backed cyber espionage operation aimed at rooting out female human rights activists who are causing trouble for the regime. Secureworks has properly released an analysis of its latest Cobalt Illusion campaign the day…

The White House and a bipartisan group of 12 senators approved the Risk Information and Communications Technology (RESTRICT) Act on Tuesday. The law gives the U.S. government the power to potentially ban foreign producers of electronic devices or software deemed…

March 9, 2023Rabbi Lakshmanancryptojacking/threat detection, A notorious cryptocurrency miner group called the 8220 Gang has been observed using a new crypter called ScrubCrypt to perform cryptojacking operations. According to Fortinet FortiGuard Labs, the attack chain begins by successfully exploiting a…

March 9, 2023Rabbi LakshmananNetwork Security / Firewall Fortinet has released fixes to address 15 security flaws. It contains one critical vulnerability affecting FortiOS and FortiProxy that could allow an attacker to take control of the affected system. The issue is…

Scammers are tricked by Canadian granny! Don’t be tempted by iPhone thieves at bars. And can the U.S. Marshals track down the villain who stole the data? All this and much more is discussed in the latest edition of the…

An information stealer known as SYS01 has been used by attackers since November 2022 to infect systems such as those of critical government infrastructure employees and manufacturing companies. The new campaign, spotted by security researchers at Morphisec, lured Facebook business…

The White House and a bipartisan group of 12 senators approved the Risk Information and Communications Technology (RESTRICT) Act on Tuesday. The act gives the U.S. government the power to potentially ban foreign producers of electronic devices or software deemed…

March 8, 2023Rabbi Lakshmanan Two critical security vulnerabilities have been identified in the Jenkins open source automation server that could allow code execution on the target system. The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, affect Jenkins servers and Update Center…

A North Korean threat actor known as the Lazarus Group has been spotted twice in the last year exploiting unnamed software flaws to gain access to South Korean financial firms. The news comes from his Asec security researcher, who released…

Trend Micro says it will stop 146 billion cyber threats in 2022. That’s a 55% increase for him year-over-year, and evidence that cybercriminals are expanding their efforts to companies of all sizes and sectors. Global security vendors have put together…