Jan 17, 2023Ravie LakshmananCyber Threat / Vulnerability Users of Zoho ManageEngine are being urged to patch their instances against a critical security vulnerability ahead of …
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems
Jan 17, 2023Ravie LakshmananSoftware Security / Supply Chain A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index …
Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software
Jan 16, 2023Ravie LakshmananData Security / Cyber Threat A “large and resilient infrastructure” comprising over 250 domains is being used to distribute information-stealing malware such …
A Secure User Authentication Method – Planning is More Important than Ever
Jan 16, 2023The Hacker NewsIdentity Management / MFA When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. …
CISA Warns of Flaws Affecting Industrial Control Systems from Major Manufacturers
Jan 16, 2023Ravie LakshmananIndustrial Control Systems The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories[1] warning of critical …
CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers
Jan 16, 2023Ravie LakshmananIndustrial Control Systems The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories[1] warning of critical …
New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild
Jan 16, 2023Ravie LakshmananThreat Landscape / Malware Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency …
Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident
Jan 14, 2023Ravie LakshmananDevOps / Data Security DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to …
Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability
Jan 14, 2023Ravie LakshmananServer Security / Patch Management A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability …
TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws
Jan 14, 2023Ravie LakshmananPrivacy / Online Safety Popular short-form video hosting service TikTok has been fined €5 million (about $5.4 million) by the French data …