Category Security

Security experts claim to have uncovered the first “cryptrom” fraudulent application to successfully bypass Apple’s stringent App Store review process. Two apps in question, Ace Pro and MBM_BitScan, were also found on Google Play. What alerts users, however, is their…

February 2, 2023Rabbi Lakshmanandatabase security / cryptocurrency Since early September 2021, at least 1,200 Redis database servers around the world have been ingested into a botnet using a “severe elusive threat” dubbed HeadCrab. “This advanced threat actor is compromising a…

Can senior Latvian politicians really be held responsible for defrauding hundreds of ‘mothers of two’ in the UK? Should I worry about the wonders of AI? All of this is discussed in the latest edition of the “Smashing Security” podcast…

An overwhelming majority (87%) of container images were found to have advanced or critical vulnerabilities, and 90% of all granted permissions were associated with the container and unused. Claims come from new report Shared by Sysdig, an integrated cloud and…

February 1, 2023Rabbi LakshmananVulnerability Cybersecurity researchers have detailed two security flaws in the open source ImageMagick software that could lead to denial of service (DoS) and information disclosure. Two issues identified by Latin American cybersecurity firm Metabase Q in version…

Graham Cluley Security News reported this week, edge scanThank you to the amazing team for your support! Edgescan simplifies vulnerability management (VM) by providing a single, full-stack SaaS solution integrated with world-class security professionals. Edgescan helps enterprises consolidate the management…

A ransomware attack targeting schools in Nantucket, Massachusetts, closed four facilities on Tuesday, with a total of about 1,700 students enrolled. School district superintendent Elizabeth Hallett announced the decision in an email to parents, Information security. “Our information technology department…

Mobile Virtual Network Operator (MVNO) google phi has reported a breach involving a third-party system containing a “limited amount” of Google Fi customer data. We confirmed that the stolen data included information on when accounts were activated, data about individual…

February 1, 2023Rabbi LakshmananPayment Security/Risk Brazilian Threat Actor Behind Advanced Modular Point of Sale (PoS) Malware Known as Prix It’s raised its head again with a new update that lets you block contactless payment transactions. Russian cybersecurity firm Kaspersky says…

The rise of supply chain attacks has increased scrutiny of the security of suppliers, clients, and business partners. This prompted security rating providers SecurityScorecard and the Cyentia Institute to investigate the exposure of organizations to vendor risk around the world.…