Category Security

January 18, 2023hacker newsVirtual CISO / Automated vCISO Compliance services have emerged as one of the hottest areas of cybersecurity. Compliance was once primarily the domain of large corporations, but times have changed and it is now a daily concern…

The UK’s financial services sector has been under a barrage of cyberattacks since Russia’s invasion of Ukraine, but organizations are confident in their ability to mitigate these risks, according to new research from Bridewell. A cybersecurity services firm surveyed over…

January 18, 2023Rabbi LakshmananICS/SCADA security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued four Industrial Control Systems (ICS) advisories pointing to several security flaws affecting products from Siemens, GE Digital, and Contec. I’m here. The most severe issues…

An active campaign to distribute NjRAT (also known as Bladabindi) using Middle Eastern geopolitical-themed lures has found victims of the infection in the Middle East and North Africa. The campaign, which has been ongoing since at least mid-2022, was spotted…

More than three-quarters (78%) of UK schools have experienced at least one type of cyber incident, according to an audit conducted by the National Cyber ​​Security Center (NCSC) and the National Grid for Learning (LGfL). This analysis is a repeat…

The threat actor Vice Society has reportedly claimed responsibility for a ransomware attack against the University of Duisburg-Essen (UDE) in November 2022 and released some of the stolen data on the dark web. Made by UDE Presentation Over the weekend,…

January 17, 2023Rabbi LakshmananCyber ​​Threat/Vulnerability Zoho ManageEngine users are asked to patch their instances for critical security vulnerabilities prior to the proof of concept release (PoC) exploit code. The problem is that CVE-2022-47966is an unauthenticated remote code execution vulnerability that…

Horizon3.ai researchers have informed Zoho ManageEngine users of a critical security vulnerability (tracked CVE-2022-47966) after designing and releasing a proof-of-concept (PoC) exploit code. writing in company blog Last Friday, Horizon3.ai researcher and exploit developer James Horseman announced that the team…

January 17, 2023Rabbi LakshmananCloud Security / Bug Report Four different Microsoft Azure services have been found vulnerable to a Server Side Request Forgery (SSRF) attack. This attack can be used to gain unauthorized access to cloud resources. Security issues discovered…

January 17, 2023Rabbi LakshmananThreat Response / Malware New research has found that attackers can abuse legitimate functionality of GitHub Codespaces to deliver malware to victims’ systems. GitHub Codespaces are cloud-based, configurable development environments that allow users to debug, maintain, and…