Category Security

Attackers have been observed using malvertising attacks to distribute a virtualized .NET malware loader called ‘MalVirt’. According to Thursday’s recommendation by sentinel onethe new loader utilizes obfuscated virtualization techniques to evade detection. “The loader is implemented in .NET and uses…

February 3, 2023Rabbi LakshmananAttack Vectors / Endpoint Security In a continuing sign that attackers are well adapted to the post-macro world, we’ve seen an increase in the use of Microsoft OneNote documents to deliver malware via phishing attacks. Notable malware…

Atlassian has released multiple patches to fix critical security vulnerabilities in Jira Service Management Server and Data Center. This vulnerability (tracked CVE-2023-22501) has a CVSS score of 9.4 and can be exploited by an attacker to impersonate another user and…

February 3, 2023Rabbi LakshmananAutomotive security/vulnerability Two new security vulnerabilities discovered in some electric vehicle (EV) charging systems can be exploited to remotely shut down charging stations and even expose them to data and energy theft. Research from Israel-based SaiFlow once…

According to PwC, about a quarter of UK business leaders expect a significant increase in cyber threats this year, and a similar number of global companies have already suffered costly breaches in the past. Global Consultant Annual Digital trust insights…

February 3, 2023Rabbi LakshmananCyber ​​Espionage / Cyber ​​Threat Iranian nation-state hacking group known as oil rig continues to target government agencies in the Middle East as part of a cyber espionage campaign that uses new backdoors to steal data. Trend…

A US man could face up to 40 years in prison after being charged with illegally obtaining $110 million in cryptocurrency from cryptocurrency exchange Mango Market and its customers. Abraham Eisenberg, 27, was living in Puerto Rico when he carried…

The UK data protection and privacy regulator no longer fines public electronic communication service providers (CSPs) if they fail to report a data breach within 24 hours. The Information Commissioner’s Office (ICO) has said that CSPs (including mobile carriers and…

February 3, 2023Rabbi LakshmananCloud security/vulnerabilities Atlassian has released fixes that address critical security flaws in Jira Service Management Server and Data Center. This vulnerability could be exploited by an attacker to impersonate another user and gain unauthorized access to a…

According to a new survey from BlackBerry, a majority (51%) of security leaders expect ChatGPT to be at the center of successful cyberattacks within a year. A survey of 1,500 IT decision makers in North America, the United Kingdom, and…