AlienFox, a new toolset enabling threat actors to harvest credentials from Application Programming Interface (API) keys and secrets from popular cloud service providers, is being distributed on Telegram. Alex Delamotte, a security researcher at…

Several cybersecurity companies have warned that the official Windows desktop app for the widely used 3CX softphone solution has been trojanized by malicious actors suspected to be state-sponsored. 3CX is Private Automatic Branch Exchange (PABX) software…

There is a critical bug in IBM's popular Aspera Faspex file transfer stack that enables the execution of arbitrary code. This bug is attracting an increasing number of cybercriminals, including ransomware gangs, as organizations fail to patch it. Rapid7…

Even though over 70 percent of companies claim to have an Insider Risk Management (IRM) program, a new report from Code42 Software found that data loss incidents increased by 32 percent among the same organizations. Based on a survey of 700 cybersecurity…

Google's Threat Analysis Group (TAG) released information regarding two different attack campaigns involving the exploitation of multiple zero-day flaws against Android, iOS, and Chrome. According to researchers, both campaigns were limited and highly…

Security researchers at Salt Security have discovered that attacks targeting application programming interfaces (APIs) have increased by 400% in the last six months.  The researchers also found that 80% of these attacks happened over authenticated…

The ransomware gang known as Clop has been observed exploiting a pre-authentication command injection vulnerability (CVE-2023-0669) in Fortra's file transfer solution GoAnywhere MFT.  The high-severity vulnerability has a CVSS:3.1 score of 7.2 and…

Spotlight on Lablet Research #40 - Reasoning about Accidental and Malicious Misuse via Formal Methods  

SoS Musings #71 - Security and Privacy for Blind and Low-Vision People

Cybersecurity Snapshots #40 - Trigona Ransomware

Cyber Scene #78 - U.S. on China’s TikTok: Tempus Fugit  

According to security researchers at Microsoft, a surge in workload identities, super admins, and “over-permissioning” is driving increased cyber risk for organizations running cloud infrastructure.  The researchers calculated that over 40,000…