Jan 26, 2023Ravie LakshmananCyber Threat / Phishing At least two federal agencies in the U.S. fell victim to a “widespread cyber campaign” that involved the …
Over 4,500 WordPress Sites Hacked to Redirect Visitors to Sketchy Ad Pages
Jan 25, 2023Ravie LakshmananWebsite Security / WordPress A massive campaign has infected over 4,500 WordPress websites as part of a long-running operation that’s been believed …
The Definitive Browser Security Checklist
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is …
North Korean Hackers Turn to Credential Harvesting in Latest Wave of Cyberattacks
Jan 25, 2023Ravie LakshmananCryptocurrency / Malware A North Korean nation-state group notorious for crypto heists has been attributed to a new wave of malicious email …
LastPass Parent Company GoTo Suffers Data Breach, Customers’ Backups Compromised
Jan 25, 2023Ravie LakshmananData Breach / Remote Work Tool LastPass-owner GoTo (formerly LogMeIn) on Tuesday disclosed that unidentified threat actors were able to steal encrypted …
VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities
Jan 25, 2023Ravie LakshmananSoftware Security / VMware VMware on Tuesday released software to remediate four security vulnerabilities affecting vRealize Log Insight[1] (aka Aria Operations for …
Chinese Hackers Utilize Golang Malware in DragonSpark Attacks to Evade Detection
Jan 24, 2023Ravie LakshmananCyber Espionage / Golang Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics …
FBI Says North Korean Hackers Behind $100 Million Horizon Bridge Crypto Theft
Jan 24, 2023Ravie LakshmananCryptocurrency / Cyber Crime The U.S. Federal Bureau of Investigation (FBI) on Monday confirmed that North Korean threat actors were responsible for …
Security Navigator Research: Some Vulnerabilities Date Back to the Last Millennium
Vulnerability analysis results in Orange Cyberdefenses’ Security Navigator[1] show that some vulnerabilities first discovered in 1999 are still found in networks today. This is concerning. …
Emotet Malware Makes a Comeback with New Evasion Techniques
Jan 24, 2023Ravie LakshmananCyber Threat / Cyber Crime The Emotet malware operation has continued to refine its tactics in an effort to fly under the …
