Jan 31, 2023Ravie LakshmananThreat Detection / Malware A shellcode-based packer[1] dubbed TrickGate has been successfully operating without attracting notice for over six years, while enabling …
QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates
Jan 31, 2023Ravie LakshmananData Security / Vulnerability Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices …
GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom
Jan 31, 2023Ravie LakshmananSecurity Incident / Encryption GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some …
Titan Stealer: A New Golang-Based Information Stealer Malware Emerges
Jan 30, 2023Ravie LakshmananThreat Detection / Malware A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram …
Realtek Vulnerability Under Attack: Over 134 Million Attempts to Hack IoT Devices
Jan 30, 2023Ravie Lakshmanan Researchers are warning about a spike in exploitation attempts weaponizing a critical remote code execution flaw in Realtek Jungle SDK since …
Gootkit Malware Continues to Evolve with New Components and Obfuscations
Jan 29, 2023Ravie LakshmananCyber Threat / Malware The threat actors associated with the Gootkit malware have made “notable changes” to their toolset, adding new components …
Microsoft Urges Customers to Secure On-Premises Exchange Servers
Jan 28, 2023Ravie LakshmananEmail Security / Cyber Threat Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster …
Eliminating SaaS Shadow IT is Now Available via a Self-Service Product, Free of Charge
Jan 28, 2023The Hacker News The use of software as a service (SaaS) is experiencing rapid growth and shows no signs of slowing down. Its …
ISC Releases Security Patches for New BIND DNS Software Vulnerabilities
Jan 28, 2023Ravie LakshmananServer Security / DNS The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name …
Ukraine Hit with New Golang-based ‘SwiftSlicer’ Wiper Malware in Latest Cyber Attack
Jan 28, 2023Ravie LakshmananCyber Threat / Cyber War Ukraine has come under a fresh cyber onslaught from Russia that involved the deployment of a previously …
