NAPLISTENER: New Malware in REF2924 Group’s Arsenal for Bypassing Detection
Mar 22, 2023Ravie LakshmananNetwork Security / Cyber Threat
The threat group tracked as REF2924 has been observed deploying previously unseen malware in its attacks...
Preventing Insider Threats in Your Active Directory
Mar 22, 2023The Hacker NewsPassword Security / Active Directory
Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With...
Google to Reduce SSL Certificate Lifespan to 90 Days
Recently, Google declared its plan to reduce the maximum validity for public TLS (SSL) certificates from 398 to 90 days.
Under its “Moving Forward, Together”...
CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems
Mar 22, 2023Ravie LakshmananICS/SCADA Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning...
ScarCruft’s Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques
Mar 22, 2023Ravie LakshmananCyber Threat Intelligence
The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM)...
Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware
Mar 22, 2023Ravie LakshmananDevOpsSec / Malware
The NuGet repository is the target of a new "sophisticated and highly-malicious attack" aiming to infect .NET developer...
Hackers Weaponized and Exploited Over 55 Zero-days
Mandiant researchers have recently reported that 55 zero-day vulnerabilities were actively exploited in 2022, most against the following brands and their products:-
Researchers state that...
BreachForums Administrator Baphomet Shuts Down Infamous Hacking Forum
Mar 22, 2023Ravie LakshmananCyber Crime / Hacking
In a sudden turn of events, Baphomet, the current administrator of BreachForums, said in an update on...
From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022
Mar 21, 2023Ravie LakshmananCyber Threat Intel / Vulnerability
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of...
BFSI Sector at the Forefront of Cyberattacks
In recent years, the BFSI Sector (Banking, Financial Services, and Insurance) has become a primary target for cyber attackers.
A 2022 report by IBM revealed...