The Secret Vulnerability Finance Execs are Missing
The (Other) Risk in Finance A few years ago, a Washington-based real estate developer received a document link from First American – a financial services company in the real estate…
New Hacking Cluster ‘Clasiopa’ Targeting Materials Research Organizations in Asia
Feb 23, 2023Ravie LakshmananMalware / Threat Intel Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools. Symantec, by Broadcom…
Lazarus Group Likely Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data
Feb 23, 2023Ravie LakshmananCyber Threat / Data Security A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely used by the notorious North…
Lazarus Group Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data
Feb 23, 2023Ravie LakshmananCyber Threat / Data Security A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely used by the notorious North…
New S1deload Malware Hijacking Users’ Social Media Accounts and Mining Cryptocurrency
Feb 23, 2023Ravie LakshmananCryptocurrency / Malware An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and…
Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries
Feb 23, 2023Ravie LakshmananSoftware Security / Supply Chain Attack Cybersecurity researchers are warning of “imposter packages” mimicking popular libraries available on the Python Package Index (PyPI) repository. The 41 malicious…
Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices
Feb 22, 2023Ravie LakshmananEndpoint Security / Software Update Apple has revised the security advisories it released last month to include three new vulnerabilities impacting iOS, iPadOS, and macOS. The first…
Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links
Feb 22, 2023Ravie LakshmananOpen Source / Supply Chain Attack In what’s a continuing assault on the open source ecosystem, over 15,000 spam packages have flooded the npm repository in an…
3 Steps to Automate Your Third-Party Risk Management Program
Feb 22, 2023The Hacker NewsCyber Risk Management If you Google “third-party data breaches” you will find many recent reports of data breaches that were either caused by an attack at…
Hydrochasma: New Threat Actor Targets Shipping Companies and Medical Labs in Asia
Feb 22, 2023Ravie LakshmananCyber Espionage / Cyber Attack Shipping companies and medical laboratories in Asia have been the subject of a suspected espionage campaign carried out by a never-before-seen threat…
