API Security Trends 2023 – Have Organizations Improved their Security Posture?

03/10/2023 0 Comments 0 tags

APIs, also known as application programming interfaces, serve as the backbone of modern software applications, enabling seamless communication and data exchange between different systems and platforms. They provide developers with

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

03/10/2023 0 Comments 0 tags

Arm has released security patches to contain a security flaw in the Mali GPU Kernel Driver that has come under active exploitation in the wild. Tracked as CVE-2023-4211, the shortcoming impacts

OpenRefine’s Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

03/10/2023 0 Comments 0 tags

A high-severity security flaw has been disclosed in the open-source OpenRefine data cleanup and transformation tool that could result in arbitrary code execution on affected systems. Tracked as CVE-2023-37476 (CVSS score: 7.8),

Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses

03/10/2023 0 Comments 0 tags

A financially motivated campaign has been targeting online payment businesses in the Asia Pacific, North America, and Latin America with web skimmers for more than a year. The BlackBerry Research

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

03/10/2023 0 Comments 0 tags

LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Provider (IDP) as initial access into an environment

APIs: Unveiling the Silent Killer of Cyber Security Risk Across Industries

03/10/2023 0 Comments 0 tags

Introduction In today’s interconnected digital ecosystem, Application Programming Interfaces (APIs) play a pivotal role in enabling seamless communication and data exchange between various software applications and systems. APIs act as

BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

02/10/2023 0 Comments 0 tags

Cybersecurity experts have discovered yet another malware-as-a-service (MaaS) threat called BunnyLoader that’s being advertised for sale on the cybercrime underground. “BunnyLoader provides various functionalities such as downloading and executing a second-stage payload,

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

02/10/2023 0 Comments 0 tags

An emerging Android banking trojan called Zanubis is now masquerading as a Peruvian government app to trick unsuspecting users into installing the malware. “Zanubis’s main infection path is through impersonating

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

01/10/2023 0 Comments 0 tags

Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah. “The malware was designed for

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

01/10/2023 0 Comments 0 tags

The U.S. Federal Bureau of Investigation (FBI) is warning of a new trend of dual ransomware attacks targeting the same victims, at least since July 2023. “During these attacks, cyber