Zero Trust and High Assurance for Cloud-Native Applications

24/03/2023 0 Comments 0 tags

This year’s Multi-Cloud Conference hosted by NIST, DOC, and Tetrate will focus on delivering Zero Trust Architecture (ZTA) through application-tier and network-tier policies in a high-assurance service mesh operating environment.

Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites

24/03/2023 0 Comments 0 tags

Patches have been released for a critical security flaw impacting the WooCommerce Payments plugin for WordPress, which is installed on over 500,000 websites. The flaw, if left unresolved, could enable

Researchers Uncover Chinese Nation State Hackers’ Deceptive Attack Strategies

24/03/2023 0 Comments 0 tags

A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solutions. The threat actor, active since at least 2012, is tracked by

GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations

24/03/2023 0 Comments 0 tags

Cloud-based repository hosting service GitHub said it took the step of replacing its RSA SSH host key used to secure Git operations “out of an abundance of caution” after it

THN Webinar: Inside the High Risk of 3rd-Party SaaS Apps

24/03/2023 0 Comments 0 tags

Any app that can improve business operations is quickly added to the SaaS stack. However, employees don’t realize that this SaaS-to-SaaS connectivity, which typically takes place outside the view of

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

24/03/2023 0 Comments 0 tags

A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package

German and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack Tactics

23/03/2023 0 Comments 0 tags

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users’ Gmail inboxes. The joint advisory comes from Germany’s domestic

Operation Soft Cell: Chinese Hackers Breach Middle East Telecom Providers

23/03/2023 0 Comments 0 tags

Telecommunication providers in the Middle East are the subject of new cyber attacks that commenced in the first quarter of 2023. The intrusion set has been attributed to a Chinese

2023 Cybersecurity Maturity Report Reveals Organizational Unpreparedness for Cyberattacks

23/03/2023 0 Comments 0 tags

In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate security budgets have risen significantly because of the growing sophistication

Nexus: A New Rising Android Banking Trojan Targeting 450 Financial Apps

23/03/2023 0 Comments 0 tags

An emerging Android banking trojan dubbed Nexus has already been adopted by several threat actors to target 450 financial applications and conduct fraud. “Nexus appears to be in its early stages of