Tag Archive

Python developers worldwide share and download code through PyPI (Python Package Index), a popular repository for software packages for the Python programming language. PyPI is widely used, making it a viable target for threat actors looking to attack developers or …

A subfield of forensic science called digital forensics focuses on finding, obtaining, processing, analyzing, and documenting electronically stored data. Digital forensics support is essential for law enforcement investigations because electronic evidence is a part of almost all criminal activities. The …

On Wednesday, an ex-Uber CSO was found guilty of federal charges related to payments he secretly approved to hackers who broke into the ride-hailing company in 2016. For concealing the breach from the Federal Trade Commission, which was looking into …

Patchstack security researchers recently warned that ‘Advanced Custom Fields’ and ‘Advanced Custom Fields Pro’ WordPress plugins are at risk of cross-site scripting attacks (XSS).  These WP plugins, installed on millions of websites, may be vulnerable to security breaches. The ‘Advanced …

A recently discovered Android subscription malware called ‘Fleckpe’ has surfaced on Google Play Store. This insidious malware disguises itself as an authentic application and has already been downloaded by more than 620,000 users into downloading it. According to Kaspersky, Fleckpe …

NodeStealer, a newly discovered malware on Meta, was identified by Facebook as stealing browser cookies. Due to this vulnerability, threat actors can obtain illicit entry into various accounts on the platform, including Gmail and Outlook. Threat actors are increasingly adopting …

VirusTotal has introduced a Crowdsourced YARA Hub to overcome this hurdle, letting users find and filter existing rules, track a new rule, and export rules to LiveHunt or Retrohunt with a Single Click. YARA (Yet Another Ridiculous Acronym) rules are …

The cybersecurity security researchers at Sophos recently detected the “Dragon Breath” APT group (aka Golden Eye Dog, APT-Q-27) using complex DLL sideloading variations to avoid detection. The APT group deploys a new attack vector that utilizes clean applications like Telegram …

Protecting employees from harmful content was a far more straightforward task once upon a time. COVID-19 changed all of that in an instant. The new hybrid work model has forced IT professionals to rethink their security strategy game plans. As …