News
-
"Study Sheds Light on Shady World of Text Message Phishing Scams"Researchers have collected and analyzed data on SMS phishing attacks, delving into the scope and nature of the operations behind such attacks.
-
"Websites Exposing Over a Million Secrets, Leaving Visitors at Risk"The Cybernews research team found 58,364 unique websites vulnerable to data breaches and full takeovers. Cybernews began investigating publicly exposed environment (.env) files on April 9.
-
"Cornell Tech Launches Security, Trust, and Safety Initiative"Cornell Tech's Security, Trust, and Safety (SETS) Initiative will leverage Cornell University's computer security, digital safety, policy, ethics, and law faculty, as well as its partnership with the Technion.
-
"Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha"A new campaign targets Brazilian banks with "AllaSenha," a custom variant of the Windows-based "AllaKore" Remote Access Trojan (RAT).
-
"XSS Vulnerabilities Found in WordPress Plugin Slider Revolution"Security researchers at Patstack conducted a security audit recently of the Slider Revolution plugin and uncovered two significant vulnerabilities that could compromise the security of WordPress websites. Slider Revolution is a widely used premium
-
"Okta Warns of Credential Stuffing Attacks Targeting Its CORS Feature"Okta, a leading Identity and Access Management (IAM) company, warns that since April, credential stuffing attacks have targeted a Customer Identity Cloud (CIC) feature.
-
"Sonatype Exposes Malicious PyPI Package 'Pytoileur'"Sonatype has disclosed the malicious PyPI package "Pytoileur," which is designed to download and install trojanized Windows binaries that are capable of surveillance, commandeering persistence, and stealing cryptocurrency.
-
"34% of Organizations Lack Cloud Cybersecurity Skills"According to Cado Security, current incident response is too time-consuming and manual, leaving organizations vulnerable to cyber threats.