News
-
"Linux Malware on the Rise"Attackers have increasingly targeted Linux environments due to the frequent use of Linux as the basis for cloud services, virtual-machine hosts, and container-based infrastructure. According to VMware's "Exposing Malware in Linux-Based Multi-Cloud…
-
"Critical Code Execution Flaws Patched in 'PHP Everywhere' WordPress Plugin"Security researchers at Defiant, a WordPress security company, discovered that thousands of WordPress websites were impacted by three remote code execution vulnerabilities that were identified in the PHP Everywhere plugin. With more than 30,000 downloads…
-
"New Ransomware Warning for Critical Infrastructure Providers"The UK, US, and Australian authorities have issued a new warning for critical infrastructure (CNI) providers after a surge in ransomware attacks over the past year. The joint cybersecurity advisory comes from the UK’s National Cyber Security Centre…
-
"Will SOTA Updates Help Hackers Steal Your Car?"Software-Over-The-Air (SOTA) updates can help hackers steal a car, depending on the vehicle's level of SOTA capability and its level of communication security. A vehicle would directly receive SOTA updates from a cloud-based server. SOTA is an important…
-
"Attackers Used Malicious Telegram Installer to Distribute Purple Fox Rootkit"In collaboration with MalwareHunterTeam, Minerva Labs analyzed a malicious Telegram installer that threat actors are using to infect victims with the Purple Fox rootkit. The researchers found that the malicious Telegram installer is a compiled AutoIt…
-
"A Majority of Companies Hacked in 2021 Did Not Improve MFA Controls Following Attack"According to a report recently released by HYPR and Cybersecurity Insiders, many organizations remain vulnerable to credential attacks because of inadequate Multi-Factor Authentication (MFA) and a general lack of urgency about the growing threat…
-
"Romance Fraud Losses Increased by 91% During COVID-19"According to new research from TSB, romance fraud losses surged by 91% during COVID-19 compared to pre-pandemic levels. The bank said it had observed cases of romance fraud double in the pandemic as a result of the shift to online dating amid…
-
"Tennessee College Hit with Ransomware"A cyberattack on a community college in Tennessee may have exposed the personal data of students, staff, and faculty. Adversaries struck Pellissippi State Community College (PSCC) with ransomware on December 5, 2021. The attack shut down…
-
"Researchers Use Tiny Magnetic Swirls to Generate True Random Numbers"A group of physicists at Brown University developed a technique that could generate millions of random digits per second by leveraging the behavior of skyrmions, which are tiny magnetic anomalies present in certain two-dimensional materials. True random…
-
"Qbot Needs Only 30 Minutes to Steal Your Credentials, Emails"According to a new report from DFIR, Qbot, also known as Qakbot and QuakBot, has returned with fast attacks. It takes around 30 minutes for the malware to steal a victim's sensitive data after the initial infection. Researchers discovered Qbot carrying…
-
"High-Severity Flaw in Argo CD Is Information Leak Risk"The exploitation of a high-severity security flaw in the popular open-source Continuous Delivery (CD) tool for Kubernetes, Argo CD, could allow an attacker to access sensitive information contained by target applications. Argo CD monitors running…
-
"A Quarter of New Online Accounts Are Fake - Report"Security researchers at Arkose Labs have discovered that there was an 85% year-on-year increase in attacks targeting logins or account creation in 2021 as bot-driven fraud attempts soared. The researchers analyzed over 150 billion transaction…