The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) has chosen[1] the first set of quantum-resistant encryption algorithms that are designed to …
OpenSSL Releases Patch for High-Severity Bug that Could Lead to RCE Attacks
The maintainers of the OpenSSL project have released patches to address a high-severity bug[1] in the cryptographic library that could potentially lead to remote code …
Hackers Abusing BRc4 Red Team Penetration Tool in Attacks to Evade Detection
Malicious actors have been observed abusing legitimate adversary simulation software in their attacks in an attempt to stay under the radar and evade detection. Palo …
The End of False Positives for Web and API Security Scanning?
July may positively disrupt and adrenalize the old-fashioned Dynamic Application Security Scanning (DAST) market, despite the coming holiday season. The pathbreaking innovation comes from ImmuniWeb, …
Bitter APT Hackers Continue to Target Bangladesh Military Entities
Military entities located in Bangladesh continue to be at the receiving end of sustained cyberattacks by an advanced persistent threat tracked as Bitter. “Through malicious …
Hive Ransomware Upgrades to Rust for More Sophisticated Encryption Method
The operators of the Hive ransomware-as-a-service (RaaS) scheme have overhauled their file-encrypting software to fully migrate to Rust and adopt a more sophisticated encryption method. …
Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms
A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules designed to steal data entered …
Pro-China Group Uses Dragonbridge Campaign to Target Rare Earth Mining Companies
A pro-China influence campaign[1] singled out rare earth mining companies in Australia, Canada, and the U.S. with negative messaging in an unsuccessful attempt to manipulate …
As New Clues Emerges, Experts Wonder: Is REvil Back?
Change is a part of life, and nothing stays the same for too long, even with hacking groups, which are at their most dangerous when …
Researchers Share Techniques to Uncover Anonymized Ransomware Sites on Dark Web
Cybersecurity researchers have detailed the various measures ransomware actors have taken to obscure their true identity online as well as the hosting location of their …