Category Security

As threats grow and attack surfaces become more complex, enterprises continue to struggle with the multitude of tools they use to handle endpoint security and management. This can create gaps in an enterprise’s ability to identify devices accessing its network…

The UK government has reintroduced new GDPR legislation that it claims will save businesses and charities as much as £4.7bn ($5.6bn) over the next decade while increasing data protection and privacy. The Conservative government is keen to prove the benefits…

March 8, 2023Rabbi LakshmananZero-day/BYOVD attacks North Korea related Lazarus Group It has been observed to weaponize undisclosed software flaws and compromise South Korean financial entities twice within a year. The initial attack in May 2022 used a vulnerable version of…

Security researchers have uncovered a cyber espionage campaign primarily targeting victims in India and Pakistan using an Android messaging app containing backdoor malware. According to ESET, vulnerable OpSec was able to identify more than 150 victims, some of whom also…

March 8, 2023Rabbi LakshmananAdvanced Persistent Threats A prominent government agency in Southeast Asia has been the target of cyber espionage campaigns conducted by a Chinese threat actor known as Sharp Panda since late last year. The intrusion is characterized by…

March 8, 2023Rabbi LakshmananVulnerability / Cybersecurity The US Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is below – CVE-2022-35914 (CVSS…

Hackers have stolen terabytes of corporate and employee information from the controversial Brazilian multinational Andrade Gutierrez. Headquartered in Belo Horizonte, the giant is one of Latin America’s largest engineering companies and is responsible for major projects in infrastructure, energy, oil…

Russian-backed hackers, both on the ground and in cyberspace, have failed to meet their strategic goals for 2022 and are now turning to cyber espionage. This describes the strategic shift from destructive attacks to cyber espionage, according to Victor Zora,…

An outdated version of the Chinese online fast fashion retailer’s Shein mobile app was discovered to regularly access the contents of an Android device’s clipboard. Microsoft wrote about them in an advisory released Monday by Dimitrios Valsamaras and Michael Peck…

A threat actor known as Sharp Panda has been observed targeting government agencies in Southeast Asia using a toolset that was first discovered in 2021. The Check Point Research (CPR) team described the new campaign in an advisory released today.…