In May 2023, Huntress ThreatOps Center analysts detected a cryptocurrency miner (XMRig) on an endpoint, identified the miner’s associated site and wallet address by locating the config file, and validated …
Chrome 114 Released With Fix for 16 Security Flaws
For Windows, Mac, and Linux, Google has released Chrome 114 to the stable channel. The next few days/weeks will see the implementation of this. According to the official statement, it fixes …
DogeRAT Android Malware Mimic Popular Apps to Steal Sensitive Data
DogeRAT (Remote Access Trojan) is an open-source Android malware that targets a sizable customer base from various businesses, particularly banking, and entertainment. CloudSEK’s TRIAD team detected it. Although this campaign …
Kali Linux 2023.2 Released – What’s New!
Offensive Security launched Kali Linux 2023.2, an updated Penetration testing distro with new features, hacking tools, and various updates. The Offensive Security team consistently releases new versions of Kali Linux …
Lazarus Hacking Group Attack IIS Web Servers to Install Web Shell
The AhnLab Security Emergency Response Center (ASEC) confirmed recent attacks on Windows IIS web servers by the nationally supported Lazarus group. Typically, threat actors exploit vulnerable web server versions to …
New Wi-Fi MITM Attack That Can Evade WPA3 Security Mechanisms
The recent discovery of a critical vulnerability in the NPU chipset by Tsinghua University and George Mason University researchers allows attackers to eavesdrop on data transmitted over 89% of real-world …
Over 421,000,000 Times Installed Android Apps from Google Play Contain Malware
A spyware-enabled Android app module that can gather details about files kept on devices and send them to attackers. Additionally, clipboard contents can be replaced and uploaded to a remote …
PyPI Mandates 2FA for all Developers Account
Python Package Index (PyPI) has been used by several developers worldwide for creating a project or installing any other dependencies for their project. One of the important features of PyPI …
Why Do You Need a Cloud-native Web Application Firewall (WAF)?
With your on-premise security solution comprising hardware, software, signatures, rules, and even machine learning, you may think your applications are fully protected. How do you know for sure that your …
COSMICENERGY – New OT Malware Causes Electric Power Disruption
A Russian government-linked malware targeting power transmission was discovered recently by researchers at Mandiant during research, suggesting its potential use in training exercises for cyberattacks on electric grids. The malware …