+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Day

March 25, 2024
25
Mar

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

March 25, 2024
Unidentified adversaries orchestrated a sophisticated attack campaign that has impacted several individual developers as well as the GitHub organization account associated with Top.gg, a Discord bot discovery site. “The threat actors used multiple TTPs in this attack, including account takeover via stolen browser cookies, contributing malicious code with verified commits, setting up a custom
Read More
25
Mar

Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

March 25, 2024
In January 2024, Microsoft discovered they’d been the victim of a hack orchestrated by Russian-state hackers Midnight Blizzard (sometimes known as Nobelium). The concerning detail about this case is how easy it was to breach the software giant. It wasn’t a highly technical hack that exploited a zero-day vulnerability – the hackers used a simple password spray...
Read More
25
Mar

New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

March 25, 2024
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations. Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantage of a feature known as data memory-dependent prefetcher (DMP) to target constant-time cryptographic implementations and capture sensitive data
Read More
25
Mar

Important Judgments of 2024: Legal Bites Year Update

March 25, 2024
The Article explains ‘Important Judgments of 2024: Legal Bites Year Update’ and the cases related to the Electoral Bonds, Environmental Pollution Control Authority, Pension Rules, Delhi High Court’s decision in the context of Reebok India Company and so on. The author’s idea is to make all the readers well-versed with the case laws decided by...
Read More
25
Mar

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

March 25, 2024
The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera. The activity, which took place from March 7 through the week of March 11, targeted Israeli entities spanning global manufacturing,...
Read More