Category Security

February 22, 2023Rabbi LakshmananEndpoint security / software updates Apple has revised its security advisory released last month to add three new vulnerabilities affecting iOS, iPadOS and macOS. The first flaw is a race condition (CVE-2023-23520) in the Crash Reporter component…

According to IBM, attackers have significantly accelerated the deployment of ransomware in recent years, from an average of over 60 days per attack in 2019 to less than four days per attack in 2021. company year X-Force Threat Intelligence Index…

February 22, 2023Rabbi LakshmananOpen Source/Supply Chain Attack In an ongoing attack on the open source ecosystem, over 15,000 spam packages flooded npm repositories trying to distribute phishing links. “The packages were created using an automated process, and the project descriptions…

Several websites broadcasting Putin’s national address on Tuesday were reportedly taken down in a suspected distributed denial of service (DDoS) attack. Journalists based in multiple locations were unable to access the All-Russian State Television and Radio Broadcasting Company (VGTRK) website…

February 22, 2023hacker newsServer security / DDoS attack In early January, Gcore faced an incident involving multiple L3/L4 DDoS attacks with peak volumes of 650 Gbps. The attackers exploited his over 2000 servers belonging to one of his top 3…

February 22, 2023Rabbi LakshmananExploit Framework / Cyberthreat An open-source command-and-control (C2) framework known as Havoc has been adopted by attackers as an alternative to other well-known legitimate toolkits such as Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said…

February 22, 2023Rabbi LakshmananVulnerability / Enterprise Security VMware released a patch on Tuesday to address a critical security vulnerability affecting its Carbon Black App Control product. tracked as CVE-2023-20858the shortcoming has a CVSS score of 9.1 out of 10 maximum…

A new information stealer advertised as ‘Stealc’ has been spotted sequoia researcher. In an advisory issued by the company on Monday, the company’s threat and detection research team said the alleged malware developer “Plymouth” promoted it on a dark web…

of cybersecurity researchers Trellix We shared our findings on six vulnerabilities and a new bug class for macOS and iOS. In an advisory released today, the company said a new class of privilege escalation bugs is based on the ForcedEntry…

February 21, 2023Rabbi Lakshmanansocial engineering / cryptocurrency Coinbase, a popular cryptocurrency exchange platform, has revealed that it has suffered a cybersecurity attack targeting its employees. “Cyber ​​controls prevented attackers from directly accessing the system, preventing loss of funds and exposure…