WithSecure researchers said it is likely Russian state group Sandworm has added a novel backdoor dubbed ‘Kapeka’ to its arsenal This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian Sandworm Group Using Novel Backdoor to Target Ukraine…
Category: www.infosecurity-magazine.com
Report Suggests 93% of Breaches Lead to Downtime and Data Loss
According to Pentera, firms are allocating 13% of their total IT security budgets to pentesting This article has been indexed from www.infosecurity-magazine.com Read the original article: Report Suggests 93% of Breaches Lead to Downtime and Data Loss
LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI This article has been indexed from www.infosecurity-magazine.com Read the original article: LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation
An open letter signed by 50 cybersecurity practitioners requires the US Congress to support NIST in restoring operations at the National Vulnerability Database This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybersecurity Pros Urge US Congress to…
Microsoft Most Impersonated Brand in Phishing Scams
New Check Point data found Microsoft was impersonated in 38% of all brand phishing attacks in Q1 2024, up from 33% in Q4 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Most Impersonated Brand in…
Open Source Leaders Warn of XZ Utils-Like Takeover Attempts
Two open source organizations have revealed attempts to socially engineer project takeovers This article has been indexed from www.infosecurity-magazine.com Read the original article: Open Source Leaders Warn of XZ Utils-Like Takeover Attempts
Bad Bots Drive 10% Annual Surge in Account Takeover Attacks
Malicious bots now represent a third of all internet traffic, says Imperva This article has been indexed from www.infosecurity-magazine.com Read the original article: Bad Bots Drive 10% Annual Surge in Account Takeover Attacks
Russia and Ukraine Top Inaugural World Cybercrime Index
An international team of researchers published the first-ever index ranking countries by cybercrime threat level This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia and Ukraine Top Inaugural World Cybercrime Index
New LockBit Variant Exploits Self-Spreading Features
Kaspersky also uncovered the use of the SessionGopher script to extract saved passwords This article has been indexed from www.infosecurity-magazine.com Read the original article: New LockBit Variant Exploits Self-Spreading Features
Palo Alto Networks Zero-Day Flaw Exploited in Targeted Attacks
Designated CVE-2024-3400 and with a CVSS score of 10.0, the flaw enables unauthorized actors to execute arbitrary code on affected firewalls This article has been indexed from www.infosecurity-magazine.com Read the original article: Palo Alto Networks Zero-Day Flaw Exploited in Targeted…
Chipmaker Giant Nexperia Confirms Cyber-Attack Amid Ransomware Group Claims
Nexperia confirmed its IT servers were accessed by attackers, with the Dunghill ransomware group claiming to have stolen chip designs and other sensitive documents This article has been indexed from www.infosecurity-magazine.com Read the original article: Chipmaker Giant Nexperia Confirms Cyber-Attack…
FBI Warns of Massive Toll Services Smishing Scam
The Feds have received thousands of complaints about phishing texts from fake road toll collection services This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Warns of Massive Toll Services Smishing Scam
Police Swoop on €645m Cannabis Investment Fraud Gang
Nine arrests and millions of euros seized in bid to bust JuicyFields investment scammers This article has been indexed from www.infosecurity-magazine.com Read the original article: Police Swoop on €645m Cannabis Investment Fraud Gang
CISA Urges Immediate Credential Reset After Sisense Breach
The breach affecting business analytics provider Sisense could lead to a wide-scale supply chain attack This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Urges Immediate Credential Reset After Sisense Breach
Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
A fix for CVE-2024-3400 is scheduled on April 4, Palo Alto Networks announced This article has been indexed from www.infosecurity-magazine.com Read the original article: Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
Apple Boosts Spyware Alerts For Mercenary Attacks
The revision points out companies like NSO Group, known for surveillance tools like Pegasus This article has been indexed from www.infosecurity-magazine.com Read the original article: Apple Boosts Spyware Alerts For Mercenary Attacks
Data Breach Exposes 300k Taxi Passengers’ Information
These records belonged to Dublin-based iCabbi, a dispatch and fleet management technology provider This article has been indexed from www.infosecurity-magazine.com Read the original article: Data Breach Exposes 300k Taxi Passengers’ Information
New Android Espionage Campaign Spotted in India and Pakistan
A new cyber espionage campaign, called ‘eXotic Visit,’ targeted Android users in South Asia via seemingly legitimate messaging apps This article has been indexed from www.infosecurity-magazine.com Read the original article: New Android Espionage Campaign Spotted in India and Pakistan
Raspberry Robin Distributed Through Windows Script Files
Distribution vectors of the Raspberry Robin worm now include Windows Script Files (WSF) alongside other methods like USB drives This article has been indexed from www.infosecurity-magazine.com Read the original article: Raspberry Robin Distributed Through Windows Script Files
Threat Actors Game GitHub Search to Spread Malware
Checkmarx warns of GitHub search result manipulation designed to promote malicious repositories This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Game GitHub Search to Spread Malware