A previously unknown threat group known as “Sandman” is making its presence felt. The group uses a modular information-stealing malware called “LuaDream” to target telecommunication service providers in the Middle East, Western Europe, and South Asia. Sandman: How This New…
Author: wordpress
Examining the Activities of the Turla APT Group
We examine the campaigns of the cyberespionage group known as Turla over the years, with a special focus on the key MITRE techniques and the corresponding IDs associated with the threat actor group. This article has been indexed from Trend…
Iranian Nation-State Actor OilRig Targets Israeli Organizations
Israeli organizations were targeted as part of two different campaigns orchestrated by the Iranian nation-state actor known as OilRig in 2021 and 2022. The campaigns, dubbed Outer Space and Juicy Mix, entailed the use of two previously documented first-stage backdoors called Solar…
US Government IT Staffer Arrested on Espionage Charges
Maryland resident faces possible death penalty This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: US Government IT Staffer Arrested on Espionage Charges
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
Atlassian and the Internet Systems Consortium (ISC) have disclosed several security flaws impacting their products that could be exploited to achieve denial-of-service (DoS) and remote code execution. The Australian software services provider said that the four high-severity flaws were fixed in new…
Experts warn of a 600X increase in P2Pinfect traffic
The experts warn of a surge in P2PInfect botnet activity since late August 2023, they are witnessing a 600x jump between September 12 and 19, 2023. In July 2023, Palo Alto Networks Unit 42 researchers discovered a new peer-to-peer (P2P) worm called P2PInfect that targets Redis…
Nozomi Networks Guardian and CMC denial of service | CVE-2023-32649
NAME__________Nozomi Networks Guardian and CMC denial of service Platforms Affected:Nozomi Networks Guardian/CMC 22.6.1 Risk Level:7.5… This article has been indexed from RedPacket Security Read the original article: Nozomi Networks Guardian and CMC denial of service | CVE-2023-32649
Fl3xx Dispatch app for iOS and Fl3xx Crew file upload | CVE-2023-42335
NAME__________Fl3xx Dispatch app for iOS and Fl3xx Crew file upload Platforms Affected:Fl3xx Fl3xx Dispatch app… This article has been indexed from RedPacket Security Read the original article: Fl3xx Dispatch app for iOS and Fl3xx Crew file upload | CVE-2023-42335
Mastodon spoofing | CVE-2023-42451
NAME__________Mastodon spoofing Platforms Affected:Mastodon Mastodon 4.2.0-beta1 Risk Level:7.7 Exploitability:Unproven Consequences:Gain Access DESCRIPTION__________ Mastodon could allow… This article has been indexed from RedPacket Security Read the original article: Mastodon spoofing | CVE-2023-42451
Fl3xx Dispatch app for iOS and Fl3xx Crew privilege escalation | CVE-2023-42334
NAME__________Fl3xx Dispatch app for iOS and Fl3xx Crew privilege escalation Platforms Affected:Fl3xx Fl3xx Dispatch app… This article has been indexed from RedPacket Security Read the original article: Fl3xx Dispatch app for iOS and Fl3xx Crew privilege escalation | CVE-2023-42334
Hotel Druid SQL injection | CVE-2023-43374
NAME__________Hotel Druid SQL injection Platforms Affected:HotelDruid HotelDruid 3.0.5 Risk Level:6.5 Exploitability:High Consequences:Data Manipulation DESCRIPTION__________ Hotel… This article has been indexed from RedPacket Security Read the original article: Hotel Druid SQL injection | CVE-2023-43374
Gold Melody Attacking Organizations With Burp Extension, Mimikatz, and Other Tools
The financially motivated GOLD MELODY threat group has been active at least since 2017, attacking organizations by taking advantage of flaws in unpatched internet-facing servers. A threat group serves as an initial access broker (IAB) by selling access to organizations…
UK Security Agency Publishes New Crypto Designs
NCSC hopes research will inform future standards This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: UK Security Agency Publishes New Crypto Designs
SMBs face growing cybersecurity threats, but basic measures can lower risks
Small and midsize businesses are targets of cybercriminals and might not have expandable resources, but they can take heart in having a smaller attack surface to safeguard. This article has been indexed from Latest stories for ZDNET in Security Read…
Apple Patches Three Actively Exploited Zero-Days
Bugs were found by Citizen Lab and Google This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Apple Patches Three Actively Exploited Zero-Days
LastPass to enforce minimum Master Password length of 12 characters
LastPass announced today (via email) that the requirements for the master password have been changed. The master password is the primary password used to gain access to accounts. In an email, LastPass […] Thank you for being a Ghacks reader.…
Silicon UK Pulse: Your Tech News Update: Episode 19
Welcome to Silicon UK Pulse – your roundup of the latest tech news and developments impacting your business for the week ending 22/09/2023. This article has been indexed from Silicon UK Read the original article: Silicon UK Pulse: Your Tech…
Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?
CACTUS Ransomware Victim: www[.]dmcivil[.]com[.]au
NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: CACTUS Ransomware Victim: www[.]dmcivil[.]com[.]au
Cisco acquires Splunk for $28 billion
Cisco, a prominent player in the networking industry, has recently completed a significant acquisition by purchasing cybersecurity solutions provider Splunk for a substantial sum of $28 billion. This announcement was made public through the company’s PR division, shedding light on…