+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Month

March 2024
08
Mar

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

March 8, 2024,
Threat actors have been observed leveraging the QEMU open-source hardware emulator as tunneling software during a cyber attack targeting an unnamed “large company” to connect to their infrastructure. While a number of legitimate tunneling tools like Chisel, FRP, ligolo, ngrok, and Plink have been used by adversaries to their advantage, the development marks the first QEMU that...
Read More
08
Mar

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

March 8, 2024,
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2024-27198 (CVSS score: 9.8), refers to an authentication bypass bug that allows for a complete
Read More
07
Mar

Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks

March 7, 2024,
Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, “target WordPress websites from the browsers of completely innocent and unsuspecting site visitors,” security researcher Denis Sinegubko said. The activity is part of a&
Read More
07
Mar

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

March 7, 2024,
The China-linked threat actor known as Evasive Panda orchestrated both watering hole and supply chain attacks targeting Tibetan users at least since September 2023. The end goal of the attacks is to deliver malicious downloaders for Windows and macOS that deploy a known backdoor called MgBot and a previously undocumented Windows implant known as Nightdoor. The findings...
Read More
07
Mar

Human vs. Non-Human Identity in SaaS

March 7, 2024
In today’s rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity (dormant, active, hyperactive), their type (internal/ external), whether they are joiners, movers, or leavers,...
Read More
07
Mar

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

March 7, 2024
The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident for allegedly stealing proprietary information from Google while covertly working for two China-based tech companies. Linwei Ding (aka Leon Ding), a former Google engineer who was arrested on March 6, 2024, “transferred sensitive Google trade secrets and...
Read More
01
Mar

Hello world!

March 1, 2024
Welcome to WordPress. This is your first post. Edit or delete it, then start writing!
Read More
01
Mar

Hello world!

March 1, 2024
Welcome to WordPress. This is your first post. Edit or delete it, then start writing!
Read More
1 … 15 16 17