N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

24/05/2023 0 Comments 0 tags

The infamous Lazarus Group actor has been targeting vulnerable versions of Microsoft Internet Information Services (IIS) servers as an initial breach route to deploy malware on targeted systems. The findings

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

23/05/2023 0 Comments 0 tags

The North Korean advanced persistent threat (APT) group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reconnaissance and information exfiltration

GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

23/05/2023 0 Comments 0 tags

Government and diplomatic entities in the Middle East and South Asia are the target of a new advanced persistent threat actor named GoldenJackal. Russian cybersecurity firm Kaspersky, which has been keeping tabs on

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

23/05/2023 0 Comments 0 tags

An unknown threat actor has been observed leveraging a malicious Windows kernel driver in attacks likely targeting the Middle East since at least May 2020. Fortinet Fortiguard Labs, which dubbed

The Rising Threat of Secrets Sprawl and the Need for Action

23/05/2023 0 Comments 0 tags

The most precious asset in today’s information age is the secret safeguarded under lock and key. Regrettably, maintaining secrets has become increasingly challenging, as highlighted by the 2023 State of Secrets

China Bans U.S. Chip Giant Micron, Citing “Serious Cybersecurity Problems”

23/05/2023 0 Comments 0 tags

China has banned U.S. chip maker Micron from selling its products to Chinese companies working on key infrastructure projects, citing national security risks. The development comes nearly two months after

Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

22/05/2023 0 Comments 0 tags

A financially motivated threat actor of Indonesian origin has been observed leveraging Amazon Web Services (AWS) Elastic Compute Cloud (EC2) instances to carry out illicit crypto mining operations. Cloud security

EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

22/05/2023 0 Comments 0 tags

Facebook’s parent company Meta has been fined a record $1.3 billion by European Union data protection regulators for transferring the personal data of users in the region to the U.S.

U.K. Fraudster Behind iSpoof Scam Receives 13-Year Jail Term for Cyber Crimes

22/05/2023 0 Comments 0 tags

A U.K. national responsible for his role as the administrator of the now-defunct iSpoof online phone number spoofing service has been sentenced to 13 years and 4 months in prison. Tejay Fletcher,

Are Your APIs Leaking Sensitive Data?

22/05/2023 0 Comments 0 tags

It’s no secret that data leaks have become a major concern for both citizens and institutions across the globe. They can cause serious damage to an organization’s reputation, induce considerable