Jan 11, 2023The Hacker NewsInformation Security / Jobs Are you looking to take your career in the information security industry to the next level? Look …
Dark Pink APT Group Targets Governments and Military in APAC Region
Jan 11, 2023Ravie LakshmananAdvanced Persistent Threat Government and military organizations in the Asia Pacific region are being targeted by a previously unknown advanced persistent threat …
Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit
The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws[1], including one bug that the company said …
StrongPity Hackers Distribute Trojanized Telegram App to Target Android Users
Jan 10, 2023Ravie LakshmananAdvanced Persistent Threat The advanced persistent threat (APT) group known as StrongPity has targeted Android users with a trojanized version of the …
Expert Analysis Reveals Cryptographic Weaknesses in Threema Messaging App
Jan 10, 2023Ravie LakshmananPrivacy / Encryption A comprehensive analysis of the cryptographic protocols used in the Swiss encrypted messaging application Threema has revealed a number …
Italian Users Warned of Malware Attack Targeting Sensitive Information
Jan 10, 2023Ravie LakshmananCyber Threat / Data Security A new malware campaign has been observed targeting Italy with phishing emails designed to deploy an information …
Severe Security Flaw Found in “jsonwebtoken” Library Used by 22,000+ Projects
Jan 10, 2023Ravie LakshmananSoftware Security / Supply Chain A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully …
Kinsing Cryptojacking Hits Kubernetes Clusters via Misconfigured PostgreSQL
Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain …
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain …
New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks
Jan 09, 2023Ravie LakshmananDatabase Security / PLM Framework A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that …
