Mar 03, 2023Ravie LakshmananThreat Intelligence / Cyber Attack The China-aligned Mustang Panda actor has been observed using a hitherto unseen custom backdoor called MQsTTang as …
U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware’s Deadly Capabilities
Mar 03, 2023Ravie LakshmananEndpoint Security / Ransomware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released[1] a new advisory about Royal ransomware[2], which emerged …
Hackers Exploit Containerized Environments to Steals Proprietary Data and Software
Mar 02, 2023Ravie LakshmananContainer Security / Cyber Threat A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and …
Hackers Exploit Containerized Environments to Steal Proprietary Data and Software
Mar 02, 2023Ravie LakshmananContainer Security / Cyber Threat A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and …
New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers
Mar 02, 2023Ravie LakshmananData Security / Cryptojacking Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open …
2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots
Mar 02, 2023The Hacker NewsBrowser Security As a primary working interface, the browser plays a significant role in today’s corporate environment. The browser is constantly …
Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI
Mar 02, 2023Ravie LakshmananSoftware Security / CodingSec A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured …
SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics
Mar 02, 2023Ravie LakshmananLinux / Cyber Threat The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate, …
Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack
Mar 02, 2023Ravie LakshmananEnterprise Security / Network Security Cisco on Wednesday rolled out security updates[1] to address a critical flaw impacting its IP Phone 6800, …
Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware
Mar 01, 2023Ravie LakshmananThreat Intelligence / Malware Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns …
