Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware
Mar 01, 2023Ravie LakshmananThreat Intelligence / Malware Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns…
Category: TheHackerNews
CISOs Are Stressed Out and It’s Putting Companies at Risk
Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of how employee mental health impacts…
Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy
Mar 01, 2023Ravie LakshmananEncryption / Email Security Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the…
Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques
Mar 01, 2023Ravie LakshmananCryptocurrency / Cyber Attack Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called…
New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises
Feb 28, 2023Ravie LakshmananRansomware / Malware A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware…
Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain
Feb 28, 2023Ravie Lakshmanan Romanian cybersecurity company Bitdefender has released a free decryptor for a new ransomware strain known as MortalKombat. MortalKombat is a new…
Application Security vs. API Security: What is the difference?
As digital transformation takes hold and businesses become increasingly reliant on digital services, it has become more important than ever to secure applications and APIs…
Blind Eagle Hackers Target Key Industries in Colombia
Feb 28, 2023Ravie LakshmananCyber Threat / Malware The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries…
LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults
Feb 28, 2023Ravie LakshmananPassword Security / Data Breach LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted…
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
Feb 28, 2023Ravie LakshmananSoftware Security / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw affecting the ZK Framework…
Researchers Share New Insights Into RIG Exploit Kit Malware’s Operations
The RIG exploit kit (EK) touched an all-time high successful exploitation rate of nearly 30% in 2022, new findings reveal. “RIG EK is a financially-motivated…
Shocking Findings from the 2023 Third-Party App Access Report
Spoiler Alert: Organizations with 10,000 SaaS users that use M365 and Google Workspace average over 4,371 additional connected apps. SaaS-to-SaaS (third-party) app installations are growing…