Tag Archive

Reports from Western Digital stated that they had a network security incident on March 26, 2023, in which an unauthorized group gained access to their company’s systems. After its initial discovery, they disclosed this incident on April 2, 2023, took …

A phishing website impersonating the popular Russian site CryptoPro CSP has been detected by the Cyble Research and Intelligence Labs (CRIL) in a recent discovery. The distribution of DarkWatchman malware was being carried out by threat actors through this website. …

A firewall serves as a barrier to unapproved network traffic.  Additional organizational security policies are enforced to achieve this, including active traffic monitoring of incoming and outgoing traffic.  Firewalls were initially implemented internally to safeguard local networks, but the modernization …

Python developers worldwide share and download code through PyPI (Python Package Index), a popular repository for software packages for the Python programming language. PyPI is widely used, making it a viable target for threat actors looking to attack developers or …

A subfield of forensic science called digital forensics focuses on finding, obtaining, processing, analyzing, and documenting electronically stored data. Digital forensics support is essential for law enforcement investigations because electronic evidence is a part of almost all criminal activities. The …

On Wednesday, an ex-Uber CSO was found guilty of federal charges related to payments he secretly approved to hackers who broke into the ride-hailing company in 2016. For concealing the breach from the Federal Trade Commission, which was looking into …

Patchstack security researchers recently warned that ‘Advanced Custom Fields’ and ‘Advanced Custom Fields Pro’ WordPress plugins are at risk of cross-site scripting attacks (XSS).  These WP plugins, installed on millions of websites, may be vulnerable to security breaches. The ‘Advanced …

A recently discovered Android subscription malware called ‘Fleckpe’ has surfaced on Google Play Store. This insidious malware disguises itself as an authentic application and has already been downloaded by more than 620,000 users into downloading it. According to Kaspersky, Fleckpe …

NodeStealer, a newly discovered malware on Meta, was identified by Facebook as stealing browser cookies. Due to this vulnerability, threat actors can obtain illicit entry into various accounts on the platform, including Gmail and Outlook. Threat actors are increasingly adopting …

VirusTotal has introduced a Crowdsourced YARA Hub to overcome this hurdle, letting users find and filter existing rules, track a new rule, and export rules to LiveHunt or Retrohunt with a Single Click. YARA (Yet Another Ridiculous Acronym) rules are …