Category Archive

In addition to the fake names that are used for the customer support portals, lots of the sites are designed to look like real brands, such as McAfee, ReasonLabs, and other renowned security companies. A stronger effort has also been …

Trellix Advanced Threat Research Team observed an unpatched 15 year old Python bug found in the Python’s tarfile module tracked as CVE-2007-4559 with CVSS score: 6.8. “The vulnerability is a path traversal attack in the extract and extractall functions in …

Wintermute, a crypto trading firm, has been targeted in the latest crypto heist to steal more than $160 million in digital assets. Only DeFi operations were affected by this hack, while lending and over-the-counter (OTC) services were not impacted at …

There is a steady increase in the number of cyberattacks taking place every day. There has been a 42% increase in attacks globally year-over-year according to the security firm, CheckPoint’s 2022 Mid-Year Report, which was published in November. In its …

When Cyble Research and Intelligence Labs (CRIL) was carrying out routine threat hunting exercises, it came across a tweet that mentioned numerous fake Zoom sites being created, which caught the attention of the researchers. There is a lot of similarity …

Recently, Uber released a security update, stating that there is no evidence that users’ private information was compromised in the data breach. “We have no evidence that the incident involved access to sensitive user data. All of our services including …

Password Manager ‘LastPass’ notified its customers of the recent security incident targeting development environment, in which some of their source code and technical information was taken. Specifically, the attackers had access to its internal systems for a four-day period in …

The adversaries from North Korea are deploying critical backdoors on the devices of targets by using trojanized versions of the PuTTY SSH client. Posing as a fake Amazon job application to put backdoors onto their devices. It is an interesting …

A breach in Uber’s computer network was discovered after the company discovered it had been hacked. In turn, several internal communication systems and engineering systems were taken offline by the company. It appears that there have been many internal systems …

Earlier, in August 2022, Vectra researchers discovered an attack path that let attackers with file system access to steal credentials for any Microsoft Teams user who is signed in. Reports say the attackers don’t require permissions to read these files …