Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job
Apr 20, 2023Ravie LakshmananLinux / Cyber Attack
The notorious North Korea-aligned state-sponsored actor known as the Lazarus Group has been attributed to a new...
Used Routers Fully Loaded With Corporate Secrets for Just $100
Researchers at ESET found that hardware on resale in the market consisted of highly confidential information such as IPsec or VPN credentials, hashed root...
Daggerfly Cyberattack Campaign Hits African Telecom Services Providers
Apr 20, 2023Ravie LakshmananCyber Attack / Malware
Telecommunication services providers in Africa are the target of a new campaign orchestrated by a China-linked threat...
Ex-Conti and FIN7 Hackers Team Up To Develop Domino Malware
The X-Force team at IBM has recently found a new malware family known as “Domino,” made by ITG14, aka FIN7, a notorious group of...
ChatGPT Account Takeover Bug Allows To Gain User’s Account
An independent security analyst and bug hunter, Nagli (@naglinagli), recently uncovered a critical security vulnerability in ChatGPT that allow attackers to easily exploit the...
Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution
Apr 19, 2023Ravie LakshmananSandbox / Software Security
A fresh round of patches has been made available for the vm2 JavaScript library to address two...
Uncovering (and Understanding) the Hidden Risks of SaaS Apps
Recent data breaches across CircleCI, LastPass, and Okta underscore a common theme: The enterprise SaaS stacks connected to these industry-leading apps can be...
Google Chrome Hit by Second Zero-Day Attack – Urgent Patch Update Released
Apr 19, 2023Ravie LakshmananBrowser Security / Zero-Day
Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its...
Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered
Apr 19, 2023Ravie LakshmananCyber Threat / Malware
The cyber espionage actor tracked as Blind Eagle has been linked to a new multi-stage attack chain...
Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine
Apr 19, 2023Ravie LakshmananCyber War / Cyber Attack
Elite hackers associated with Russia's military intelligence service have been linked to large-volume phishing campaigns aimed...