Friend or Foe? | API Security Newsletter
Welcome to our April API newsletter, recapping some of the events of last month. This month’s topic is Generative AI tools (e.g., ChatGPT) in cybersecurity.…
Month: May 2023
Parental control app with 5 million downloads vulnerable to attacks
Kiddowares ‘Parental Control – Kids Place’ app for Android is impacted by multiple vulnerabilities that could enable attackers to upload arbitrary files on protected devices,…
Attack automation becomes a prevalent threat against APIs
The second half of 2022 marked a significant turning point in the security landscape. In several high-profile incidents, application programming interfaces (APIs) emerged as a…
Affiliates Take Home 85% of Ransom Payouts
May 16, 2023Ravie LakshmananCyber Crime / Ransomware Ransomware affiliates associated with the Qilin ransomware-as-a-service (RaaS) scheme earn anywhere between 80% to 85% of the ransom…
Plexal launches Cyber Runway 3.0 accelerator programme
London startup hub Plexal is launching its third Cyber Runway accelerator programme to provide more tailored support for security startups in specific areas. The…
Launching the Hacker Calendar, Never Miss a Challenge Again
HackerOne has a long history of running Hack Days. You might still remember our recent hack day where we launched the HackerOne Alexa Skill. Earlier…
Secure your organization’s Mobile Endpoints
Over the years, mobile devices like smartphones, tablets, and laptops have been extensively used to get work done, primarily due to these powerful devices facilitating…
Fraudsters send fake invoice, follow up with fake exec confirmation
Fraudsters are trying out a new approach to convince companies to pay bogus invoices: instead of hijacking existing email threads, they are creating convincing ones…
CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit Modules
May 16, 2023Ravie LakshmananOnline Security / Malware The threat actors behind the CopperStealer malware resurfaced with two new campaigns in March and April 2023 that…
Scality pushes anti-ransomware features in Artesca object storage
Scality has launched version 2.0 of its Artesca platform, with a big emphasis on the ransomware protection inherent to object storage and its availability as a (virtual)…
SPF Record Research – Detectify Blog
To prevent email spoofing, it is important to manually configure email authentication systems to the highest standard. This is a complicated process that often results…
Re-Victimization from Police-Auctioned Cell Phones – Krebs on Security
Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them…