Category Security

January 30, 2023Rabbi Lakshmanan Researchers have warned of a spike in exploit attempts weaponized against critical remote code execution flaws in the Realtek Jungle SDK since early August 2022. According to Palo Alto Networks Unit 42, the ongoing campaign has…

Ukrainian cyber experts uncovered multiple destructive malware used in an attack targeting the country’s state-run news agency (Ukrinform) earlier this month. The National Computer Emergency Response Team (CERT-UA) has revealed in an update that the attack was made public on…

January 29, 2023Rabbi LakshmananCyber ​​Threat/Malware Actors associated with the Gootkit malware have made “notable changes” to their toolset, adding new components and obfuscations to their infection chain. Mandiant, owned by Google, monitors activity clusters under the moniker UNC2565note that the…

January 28, 2023hacker news The use of Software as a Service (SaaS) is growing rapidly and shows no signs of slowing down. Its decentralized and easy-to-use nature helps improve employee productivity, but it also poses many security and IT challenges.…

January 28, 2023Rabbi LakshmananEmail Security / Cyber ​​Threats Microsoft encourages customers to keep their Exchange servers up-to-date and take steps to harden their environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. I am…

January 28, 2023Rabbi LakshmananServer Security / DNS The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite that could lead to a denial…

January 28, 2023Rabbi LakshmananCyber ​​Threat / Cyber ​​Warfare Ukraine suffered a new cyber attack from Russia dubbed a previously undocumented Golang-based data wiper. swift slicer. ESET has identified the attack as being carried out by Sandworm, a national group associated…

Operations that respond to black enft A ransomware breach has revealed the use of a new PlugX malware variant that automatically infects attached removable USB media devices. Palo Alto Networks Unit 42 shared findings Information security I added today that…

January 27, 2023Rabbi Lakshmananstate-sponsored attacks Britain’s National Cyber ​​Security Center (NCSC) on Thursday warned of spear-phishing attacks launched by Russian and Iranian state-backed attackers for intelligence gathering operations. “The attacks do not target the general public, but rather specific sectors…

Researchers found three separate vulnerabilities. OpenEMRopen source software for electronic medical records and practice management. Published by Sonar’s Clean Code Experts Recommendation On Wednesday, about a flaw discovered by security researcher Dennis Brinkrolf. “Several code vulnerabilities were discovered in OpenEMR…