Ransomware Decryption
17
Aug
2023

Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands

The Rapid7 mid-year review of the threat landscape is not reassuring. Ransomware remains high, basic security defenses are not being…

Ransomware in chains
17
Aug
2023

Triple Extortion Ransomware and the Cybercrime Supply Chain

Ransomware attacks continue to grow both in sophistication and quantity. 2023 has already seen more ransomware attacks involving data exfiltration…

Cisco Duo Device Health App Flaw
17
Aug
2023

Cisco Duo Device Health App Flaw Allows Directory Traversal Attacks

The CryptoService function in the Cisco Duo Device Health Application for Windows has a vulnerability tracked as (CVE-2023-20229). This might…

Cryptojacking and Proxyjacking
17
Aug
2023

New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities

Aug 17, 2023THNCryptojacking / Proxyjacking A new, financially motivated operation dubbed LABRAT has been observed weaponizing a now-patched critical flaw…

Toll Government and Defence targets second phase of IT modernisation
17
Aug
2023

Toll Government and Defence targets second phase of IT modernisation – Strategy – Cloud

Toll Government and Defence is moving into the second and final phase of modernising and “fortifying” its IT environment, which…

[tl;dr sec] #195 - Kubernetes Exposed, SBOMs, Elastic's Vuln Management
17
Aug
2023

[tl;dr sec] #195 – Kubernetes Exposed, SBOMs, Elastic’s Vuln Management

I hope you’ve been doing well! Hacker Summer Camp This year was my first time in Vegas since the pandemic,…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
17
Aug
2023

Cisco Patches High-Severity Vulnerabilities in Enterprise Applications

Cisco on Wednesday announced security updates for several enterprise applications to patch high-severity vulnerabilities leading to privilege escalation, SQL injection,…

Android
17
Aug
2023

Thousands of Android APKs use compression trick to thwart analysis

Threat actors increasingly distribute malicious Android APKs (packaged app installers) that resist decompilation using unsupported, unknown, or heavily tweaked compression…

Ivanti Avalanche Vulnerabilities Let Attackers Remotely Exploit Without User Authentication
17
Aug
2023

Ivanti Avalanche Flaw Let Attackers Execute Remote Code

Ivanti Avalanche has been reported with several vulnerabilities ranging between Medium to High severity. Vulnerabilities include Arbitrary file upload remote…

International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event
17
Aug
2023

International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event

To celebrate and connect cybersecurity’s remarkable women and their allies, Nineteen Group, organisers of International Cyber Expo, has launched ‘Grab…

Lenovo Q1 revenue misses
17
Aug
2023

Lenovo Q1 revenue misses – Hardware

Lenovo Group posted a worse-than-expected 24 percent fall in revenue for the April-June quarter, hit by a prolonged slump in…

BT joins line-up for Wales Tech Week
17
Aug
2023

BT joins line-up for Wales Tech Week

Wales Tech Week has today unveiled BT as the partner for the summit’s Connectivity Zone, reaffirming its commitment to advancing…