Uncovering (and Understanding) the Hidden Risks of SaaS Apps
Recent data breaches across CircleCI, LastPass, and Okta underscore a common theme: The enterprise SaaS stacks connected to these industry-leading apps can be at serious…
Category: TheHackerNews
U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage
Apr 19, 2023Ravie LakshmananNetwork Security / Cyber Espionage U.K. and U.S. cybersecurity and intelligence agencies have warned of Russian nation-state actors exploiting now-patched flaws in…
Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems
Apr 19, 2023Ravie LakshmananCyber Threat / SCADA An Iranian government-backed actor known as Mint Sandstorm has been linked to attacks aimed at critical infrastructure in…
Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution
Apr 19, 2023Ravie LakshmananSandbox / Software Security A fresh round of patches has been made available for the vm2 JavaScript library to address two critical…
YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader
Apr 18, 2023Ravie LakshmananThreat Intelligence / Cyber Risk Cybersecurity researchers have detailed the inner workings of a highly evasive loader named “in2al5d p3in4er” (read: invalid…
Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads
Apr 18, 2023Ravie LakshmananMobile Security / Hacking A new Android malware strain named Goldoson has been detected in the official Google Play Store spanning more…
Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access
Apr 18, 2023Ravie LakshmananCyber Threat / Malware The Iranian threat actor known as MuddyWater is continuing its time-tested tradition of relying on legitimate remote administration…
LockBit Ransomware Now Targeting Apple macOS Devices
Apr 18, 2023Ravie LakshmananEncryption / Malware Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple’s…
New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware
Apr 17, 2023Ravie LakshmananFinancial Security / Malware A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware,…
Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose
Apr 17, 2023Ravie LakshmananSurveillance / Privacy Israeli spyware vendor QuaDream is allegedly shutting down its operations in the coming days, less than a week after…
What’s the Difference Between CSPM & SSPM?
Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) are frequently confused. The similarity of the acronyms notwithstanding, both security solutions focus on…
FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks
Apr 17, 2023Ravie Lakshmanan A new strain of malware developed by threat actors likely affiliated with the FIN7 cybercrime group has been put to use…