Category Security

March 06, 2023Rabbi LakshmananEncryption / Cybersecurity A group of researchers have clarified what they say is a vulnerability in certain implementations. CRYSTALS-Kyveris one of the cryptographic algorithms the US government chose last year to be quantum resistant. The exploit is…

Two separate vulnerabilities were found in Trusted Platform Module (TPM) 2.0. This could lead to information disclosure or privilege escalation. At a basic level, a TPM is a hardware-based technology that provides secure cryptographic capabilities in modern computer operating systems…

March 4, 2023Rabbi LakshmananBank Security / Cyber ​​Crime New ATM malware stock dubbed fix Since the beginning of February 2023, we have seen attacks targeting Mexican banks. “ATM malware is hidden inside another seemingly harmless program,” said Latin American cybersecurity…

March 4, 2023hacker newsSaaS Security / Cyber ​​Security In January of this year, a SaaS Security Posture Management (SSPM) company named Wing Security (Wing) made waves by announcing a free SaaS-Shadow IT discovery solution. A cloud-based company was invited to…

Industry experts warn of increasing risks to corporate profits from so-called SMS pumping scams, which exploit one-time password (OTP) generation to make money for cybercriminals. The scale of the threat was highlighted by Elon Musk last month when he claimed…

security researcher ESET discovered a new custom backdoor named MQsTTang. mustang panda. write in Recommendation ESET malware researcher Alexandre Côté Cyr, published March 2, 2023, explained that the new backdoor is part of an ongoing campaign that the company dates…

The US Cybersecurity and Infrastructure Security Agency (CISA) has released a new advisory alert system. Royal Ransomware Group. The document, which is part of the agency’s #StopRansomware campaign, was released Thursday in collaboration with the FBI and describes the Tactics,…

March 3, 2023Rabbi LakshmananEnterprise Security / IoT The Trusted Platform Module (TPM) 2.0 Reference Library specification has revealed two serious security flaws that could lead to information disclosure and privilege escalation. one of the vulnerabilities CVE-2023-1017for out-of-bounds writes, and the…

With text-based multi-factor authentication (MFA) soon to be phased out, Twitter users urgently need to find alternatives, the UK’s National Cyber ​​Security Center (NCSC) said. The agency, which is part of GCHQ, claims MFA offers “huge benefits” to help consumers…

March 3, 2023Rabbi LakshmananThreat Intelligence / Cyber ​​Attack A Chinese Mustang Panda attacker has been observed using a custom backdoor that has never been seen before. MQsTTang As part of an ongoing social engineering campaign launched in January 2023. ESET…