7-Eleven Australia to deploy computer vision in some stores – Software
7-Eleven Australia is set to deploy a computer vision-based system by startup Grabango in a selection of stores that will remove the need for customers…
Month: August 2023
Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands
The Rapid7 mid-year review of the threat landscape is not reassuring. Ransomware remains high, basic security defenses are not being used, security maturity is low,…
Triple Extortion Ransomware and the Cybercrime Supply Chain
Ransomware attacks continue to grow both in sophistication and quantity. 2023 has already seen more ransomware attacks involving data exfiltration and extortion than all of…
Cisco Duo Device Health App Flaw Allows Directory Traversal Attacks
The CryptoService function in the Cisco Duo Device Health Application for Windows has a vulnerability tracked as (CVE-2023-20229). This might allow a low-privileged attacker to…
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities
Aug 17, 2023THNCryptojacking / Proxyjacking A new, financially motivated operation dubbed LABRAT has been observed weaponizing a now-patched critical flaw in GitLab as part of…
Toll Government and Defence targets second phase of IT modernisation – Strategy – Cloud
Toll Government and Defence is moving into the second and final phase of modernising and “fortifying” its IT environment, which has seen it become one…
[tl;dr sec] #195 – Kubernetes Exposed, SBOMs, Elastic’s Vuln Management
I hope you’ve been doing well! Hacker Summer Camp This year was my first time in Vegas since the pandemic, and I even managed to…
Cisco Patches High-Severity Vulnerabilities in Enterprise Applications
Cisco on Wednesday announced security updates for several enterprise applications to patch high-severity vulnerabilities leading to privilege escalation, SQL injection, directory traversal, and denial-of-service (DoS).…
Thousands of Android APKs use compression trick to thwart analysis
Threat actors increasingly distribute malicious Android APKs (packaged app installers) that resist decompilation using unsupported, unknown, or heavily tweaked compression algorithms. The main advantage of…
Ivanti Avalanche Flaw Let Attackers Execute Remote Code
Ivanti Avalanche has been reported with several vulnerabilities ranging between Medium to High severity. Vulnerabilities include Arbitrary file upload remote code execution, Authentication bypass, Buffer…
International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event
To celebrate and connect cybersecurity’s remarkable women and their allies, Nineteen Group, organisers of International Cyber Expo, has launched ‘Grab the Mic: Women in Cyber’.…
Lenovo Q1 revenue misses – Hardware
Lenovo Group posted a worse-than-expected 24 percent fall in revenue for the April-June quarter, hit by a prolonged slump in global demand for personal computers.…