Real Crooks Sign Their Malware – Krebs on Security
Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been…
Month: June 2023
Embracing Advanced Frameworks for Effective Vulnerability Management
The shifting landscape of cybersecurity poses significant challenges for traditional vulnerability management approaches. The difficulties often arise from a lack of automation and a compartmentalized…
New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware
Jun 01, 2023Ravie LakshmananMobile Security / APT A previously unknown advanced persistent threat (APT) is targeting iOS devices as part of a sophisticated and long-running…
Hacker E-Book| Helping You Hack, Learn and Earn
A world wide war is being waged in which the most able-bodied soldiers are being discouraged from enlisting. It is an information security war, and…
Amazon fined $31 million over privacy breaches, including snooping on kids
The FTC’s investigation found that the recordings, also including sensitive geolocation data, were used to train the Alexa voice assistant to improve its response to…
Ransomware attack on Biotech company exposes info of over 2.5 million patients
A recent ransomware attack on a New York-based biotech company, Enzo Biochem, has resulted in the exposure of sensitive information belonging to more than 2.5…
Critical zero-day vulnerability in MOVEit Transfer exploited by attackers!
A critical zero-day vulnerability in Progress Software’s enterprise managed file transfer solution MOVEit Transfer is being exploited by attackers to grab corporate data. “[The vulnerability]…
CYTRACOM improves efficiency for MSPs with ControlOne platform updates
CYTRACOM announces a significant update to its ControlOne platform, enabling MSPs to prevent managed clients from evading security requirements and create a passwordless experience for…
Where’s that Security@? | HackerOne
All technology contains bugs. These bugs frequently have security implications that may be exploited by criminals, but are more often discovered by friendly parties —…
New MOVEit Transfer zero-day mass-exploited in data theft attacks
Hackers are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software to steal data from organizations. MOVEit Transfer is a managed file…
How Do ‘Nigerian Prince’ And Other Online Scams Hoodwink Us?
The recent sentencing of two Nigerian nationals, Soloman Ekunke Okpe and Johnson Uke Obogo, yet again has drawn attention to the pervasive nature of online…
Met Police director of intelligence defends facial recognition
The Metropolitan Police Services’ (MPS) director of intelligence has defended the force’s use of facial-recognition technology to a Parliamentary committee, as part of its inquiry…