Feb 24, 2023Ravie LakshmananPrivacy / Data Safety An investigation into data safety labels for Android apps available on the Google Play Store has uncovered “serious …
Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware
Feb 23, 2023Ravie LakshmananEndpoint Security / Cryptocurrency Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems. Jamf …
Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products
Feb 23, 2023Ravie Lakshmanan Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, …
The Secret Vulnerability Finance Execs are Missing
The (Other) Risk in Finance A few years ago, a Washington-based real estate developer received a document link from First American – a financial services …
New Hacking Cluster ‘Clasiopa’ Targeting Materials Research Organizations in Asia
Feb 23, 2023Ravie LakshmananMalware / Threat Intel Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set …
Lazarus Group Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data
Feb 23, 2023Ravie LakshmananCyber Threat / Data Security A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely …
Lazarus Group Likely Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data
Feb 23, 2023Ravie LakshmananCyber Threat / Data Security A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely …
New S1deload Malware Hijacking Users’ Social Media Accounts and Mining Cryptocurrency
Feb 23, 2023Ravie LakshmananCryptocurrency / Malware An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer …
Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries
Feb 23, 2023Ravie LakshmananSoftware Security / Supply Chain Attack Cybersecurity researchers are warning of “imposter packages” mimicking popular libraries available on the Python Package Index …
Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices
Feb 22, 2023Ravie LakshmananEndpoint Security / Software Update Apple has revised the security advisories[1] it released last month to include three new vulnerabilities impacting iOS, …
