Mar 07, 2023Ravie LakshmananPrivacy / Data Breach An older version of Shein’s Android application[1] suffered from a bug that periodically captured and transmitted clipboard contents …
LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach
Mar 07, 2023Ravie LakshmananPassword Security / Software Update The massive breach at LastPass was the result of one of its engineers failing to update Plex …
New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims
Mar 06, 2023Ravie LakshmananNetwork Security / Malware A never-before-seen complex malware is targeting business-grade routers to covertly spy on victims in Latin America, Europe, and …
From Disinformation to Deep Fakes: How Threat Actors Manipulate Reality
Deep fakes are expected to become a more prominent attack vector. Here’s how to identify them. What are Deep Fakes? A deep fake is the …
Core Members of DoppelPaymer Ransomware Gang Targeted in Germany and Ukraine
Mar 06, 2023Ravie LakshmananCyber Crime / Ransomware Law enforcement authorities from Germany and Ukraine have targeted suspected core members of a cybercrime group that has …
Experts Reveal Google Cloud Platform’s Blind Spot for Data Exfiltration Attacks
Mar 06, 2023Ravie LakshmananCloud Computing / Data Safety Malicious actors can take advantage of “insufficient” forensic visibility into Google Cloud Platform (GCP) to exfiltrate sensitive …
Experts Discover Flaw in U.S. Govt’s Chosen Quantum-Resistant Encryption Algorithm
Mar 06, 2023Ravie LakshmananEncryption / Cybersecurity A group of researchers has revealed what it says is a vulnerability in a specific implementation of CRYSTALS-Kyber, one …
Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery
Mar 04, 2023The Hacker NewsSaaS Security / Cyber Security This past January, a SaaS Security Posture Management (SSPM) company named Wing Security (Wing) made waves …
New FiXS ATM Malware Targeting Mexican Banks
Mar 04, 2023Ravie LakshmananBanking Security / Cyber Crime A new ATM malware strain dubbed FiXS has been observed targeting Mexican banks since the start of …
New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices
Mar 03, 2023Ravie LakshmananEnterprise Security / IoT A pair of serious security defects has been disclosed in the Trusted Platform Module (TPM[1]) 2.0 reference library …
