Category Security

January 14, 2023Rabbi Lakshmanannetwork security / bug report Cisco has warned of two security vulnerabilities affecting its End-of-Life (EoL) Small Business RV016, RV042, RV042G, and RV082 routers, but they have been subject to proof-of-concept (PoC) exploits. The issue is rooted…

Two insurance multinationals have revealed that the details of millions of Japanese customers were hacked and put up for sale after a third-party contractor was allegedly compromised. Aflac and Zurich’s statements did not name the compromised supplier, but a local…

According to Chainalysis, more than $20 billion was illegally traded using cryptocurrencies last year. Blockchain analytics firms help law enforcement, government agencies, and other entities track cryptocurrency transactions for compliance, law enforcement, and other goals. It claims that there was…

Russian cybercriminals have been observed on dark web forums attempting to circumvent OpenAI’s API restrictions and gain access. ChatGPT chatbot for malicious purposes. For example, various individuals have been observed discussing how to use stolen payment cards to pay for…

A pro-Russian hacktivist group known as NoName057(16) recently launched new attacks against organizations and companies in Poland, Lithuania and other countries. Most recently, this group began targeting his website of a Czech presidential candidate. according to sentinel oneI found a…

January 13, 2023Rabbi LakshmananVPN/surveillance ware A compromised VPN installer is used to deliver some of the dubbed surveillance software ice pie As part of a malware campaign launched in May 2022. In its analysis, Bitdefender states that it “uses a…

Cisco warned customers of a critical authentication bypass vulnerability due to publicly available exploit code affecting multiple End of Life (EoL) VPN routers. Security flaw (tracking CVE-2023-20025) was discovered in the web-based management interface of Cisco Small Business (SMB) RV016,…

January 13, 2023Rabbi LakshmananZero-day/incident response The FortiOS SSL-VPN zero-day vulnerability that Fortinet addressed last month was exploited by an unknown actor in attacks targeting governments and other large organizations. In a postmortem analysis published this week, Fortinet researchers said, “The…

European law enforcement has hit a scammer operating call centers across the continent who stole millions of euros from cryptocurrency investors. Crime-fighting officials have teamed up to tackle an organized crime group that duped unwary ordinary citizens into investing in…

Law enforcement agencies across Europe have made multiple arrests this week as part of a crackdown on criminal networks suspected of running massive crypto investment fraud schemes. Coordinated by Europol, police have arrested 14 people in Serbia, 1 person in…