Mar 01, 2023Ravie LakshmananEndpoint Security / Cyber Threat A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware …
CISOs Are Stressed Out and It’s Putting Companies at Risk
Mar 01, 2023The Hacker NewsThreat Detection and Response Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was …
Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy
Mar 01, 2023Ravie LakshmananEncryption / Email Security Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the …
Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques
Mar 01, 2023Ravie LakshmananCryptocurrency / Cyber Attack Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called …
Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain
Feb 28, 2023Ravie Lakshmanan Romanian cybersecurity company Bitdefender has released[1] a free decryptor for a new ransomware strain known as MortalKombat. MortalKombat is a new …
New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises
Feb 28, 2023Ravie LakshmananRansomware / Malware A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware …
Application Security vs. API Security: What is the difference?
As digital transformation takes hold and businesses become increasingly reliant on digital services, it has become more important than ever to secure applications and APIs …
APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia
Feb 28, 2023Ravie LakshmananCyber Threat / Malware The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries …
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
Feb 28, 2023Ravie LakshmananSoftware Security / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added[1] a high-severity flaw affecting the ZK Framework …
LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults
Feb 28, 2023Ravie LakshmananPassword Security / Data Breach LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted …
