Dec 16, 2022Ravie LakshmananBackup & Recovery / Zero-Day The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added[1] two vulnerabilities impacting Veeam Backup & Replication …
Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities
Dec 15, 2022Ravie LakshmananAdvanced Persistent Threat A Chinese-speaking advanced persistent threat (APT) actor codenamed MirrorFace has been attributed to a spear-phishing campaign targeting Japanese political …
Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as ‘Critical’
Dec 15, 2022Ravie LakshmananWindows Security / Network Security Microsoft has revised the severity of a security vulnerability it originally patched in September 2022[1], upgrading it …
Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims
Dec 15, 2022Ravie LakshmananMobile Security / A previously undocumented Android malware campaign has been observed leveraging money-lending apps to blackmail victims into paying up with …
Top 5 Web App Vulnerabilities and How to Find Them
Web applications, often in the form of Software as a Service (SaaS), are now the cornerstone for businesses all over the world. SaaS solutions have …
Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages
Dec 15, 2022Ravie Lakshmanan NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published …
FBI Charges 6, Seizes 48 Domains Linked to DDoS-for-Hire Service Platforms
Dec 15, 2022Ravie LakshmananCyber Attack / DDoS-for-Hire The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of 48 domains that offered services to …
Hacking Using SVG Files to Smuggle QBot Malware onto Windows Systems
Dec 15, 2022Ravie LakshmananEmail Security / Endpoint Security Phishing campaigns involving the Qakbot malware[1] are using Scalable Vector Graphics (SVG[2]) images embedded in HTML email …
New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts
Dec 14, 2022Ravie Lakshmanan A new Go-based botnet has been spotted scanning and brute-forcing self-hosted websites using the WordPress content management system (CMS) to seize …
Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems
Microsoft on Tuesday disclosed it took steps to suspend accounts that were used to publish malicious drivers[1] that were certified by its Windows Hardware Developer …
