News
-
"American Express, Snapchat Open-Redirect Vulnerabilities Exploited in Phishing Scheme"Malicious actors have been sending phishing emails to Google Workspace and Microsoft 365 users by exploiting open-redirect vulnerabilities affecting American Express and Snapchat domains. According to INKY research, the phishers in both cases included… -
"Chinese Hackers Use New Cobalt Strike-like Attack Framework"Researchers have discovered a new post-exploitation attack framework called Manjusaka in the wild, which can be used as an alternative to the widely used Cobalt Strike toolset or in tandem with it for redundancy. Manjusaka employs implants written in the…
-
"Phishers Use Custom Phishing Kit to Hijack MFA-Protected Enterprise Microsoft Accounts"According to Zscaler researchers, an ongoing large-scale phishing campaign is targeting owners of business email accounts at companies in the FinTech, Lending, Insurance, Energy, and Manufacturing sectors in the US, UK, New Zealand, and Australia. To…
-
"Universities Put Email Users at Cyber Risk"Security researchers at Proofpoint conducted a Domain-based Message Authentication, Reporting and Conformance (DMARC) analysis and found that institutions in the U.S. have among some of the poorest protections to prevent domain spoofing and lack…
-
"Ransomware Attacks Taking Toll on Security Professionals"In a new study conducted by researchers at Menlo Security, they found that a third of organizations experience a ransomware attack at least once a week, with one in 10 experiencing them more than once a day. The researchers also found that almost…
-
"Thousands of Solana Wallets Drained in Multimillion Dollar Exploit"Solana, an increasingly popular blockchain known for its speedy transactions, has become hacked after users reported that funds have been drained from internet-connected “hot” wallets. An unknown threat actor drained funds from approximately 8,000…
-
"Google Paid Out $90,000 for Vulnerabilities Patched by Chrome 104"Google has patched 27 vulnerabilities with the release of Chrome 104 recently, and the researchers who reported some of these security holes earned thousands of dollars in bug bounties. Google paid out approximately $90,000 for the flaws patched in…
-
"T-Mobile Retailer Guilty of $25m Fraud Scheme"The former owner of a T-Mobile store, Argishti Khudaverdyan, 44, of Burbank, has been found guilty of a multimillion-dollar scheme to illegally unlock and unblock mobile devices. Khudaverdyan was found guilty of 14 federal charges, including wire…
-
"VirusTotal Reveals Most Impersonated Software in Malware Attacks"Threat actors are increasingly impersonating legitimate applications such as Skype, Adobe Reader, and VLC Player in order to take advantage of trust relationships and increase the likelihood of a successful social engineering attack. According to…
-
"LV Ransomware Attack Targets German Semiconductor Manufacturer Semikron"Semikron, a German power electronics manufacturer, has revealed that a ransomware attack partially encrypted its network. Semikron employs approximately 3,000 people across 24 offices and 8 production facilities in Germany, Brazil, China, France, India,…
-
"U-M Spin-off Agita Labs Releases Always Encrypted Computing Product"TrustForge, which is based on University of Michigan (U-M) research, enables users to protect data using a process known as sequestered encryption. As computing capabilities expand exponentially, so do the threats to private and professional users…
-
"Post-quantum Encryption Contender Is Taken Out by Single-Core PC and 1 Hour"A new attack involving a single traditional computer broke a fourth-round candidate in the US government's ongoing campaign aimed at protecting data in the age of quantum computers, highlighting the risks involved in standardizing the next generation of…