+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Day

April 16, 2024
16
Apr

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

April 16, 2024
Security researchers have uncovered a “credible” takeover attempt targeting the OpenJS Foundation in a manner that evokes similarities to the recently uncovered incident aimed at the open-source XZ Utils project. “The OpenJS Foundation Cross Project Council received a suspicious series of emails with similar messages, bearing different names and overlapping GitHub-associated emails,” OpenJS
Read More
16
Apr

TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

April 16, 2024
The threat actor tracked as TA558 has been observed leveraging steganography as an obfuscation technique to deliver a wide range of malware such as Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake Keylogger, and XWorm, among others. “The group made extensive use of steganography by sending VBSs, PowerShell code, as well as RTF documents with an embedded...
Read More
16
Apr

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

April 16, 2024
New cybersecurity research has found that command-line interface (CLI) tools from Amazon Web Services (AWS) and Google Cloud can expose sensitive credentials in build logs, posing significant risks to organizations. The vulnerability has been codenamed LeakyCLI by cloud security firm Orca. “Some commands on Azure CLI, AWS CLI, and Google Cloud CLI can expose sensitive information in
Read More
16
Apr

Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack

April 16, 2024
The maintainers of the PuTTY Secure Shell (SSH) and Telnet client are alerting users of a critical vulnerability impacting versions from 0.68 through 0.80 that could be exploited to achieve full recovery of NIST P-521 (ecdsa-sha2-nistp521) private keys. The flaw has been assigned the CVE identifier CVE-2024-31497, with the discovery credited to researchers Fabian Bäumer and Marcus
Read More
16
Apr

Identity in the Shadows: Shedding Light on Cybersecurity’s Unseen Threats

April 16, 2024
In today’s rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has heightened the vulnerability of digital identities to exploitation, making it imperative for businesses to fortify their identity security measures. Our recent research report, The Identity Underground
Read More
16
Apr

FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

April 16, 2024
The U.S. Federal Trade Commission (FTC) has ordered the mental telehealth company Cerebral from using or disclosing personal data for advertising purposes. It has also been fined more than $7 million over charges that it revealed users’ sensitive personal health information and other data to third parties for advertising purposes and failed to honor its...
Read More
16
Apr

Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown

April 16, 2024
Two individuals have been arrested in Australia and the U.S. in connection with an alleged scheme to develop and distribute a remote access trojan called Hive RAT (previously Firebird). The U.S. Justice Department (DoJ) said the malware “gave the malware purchasers control over victim computers and enabled them to access victims’ private communications, their login credentials, and
Read More
16
Apr

24 Landmark Cases related to Contract Law

April 16, 2024
The Article explains ’24 landmark cases related to Contract Law’ and the cases are basically related to the formation of a contract, a minor’s position under contract law, an offer, an invitation to offer, acceptance, and many more. The idea of the author is to make all the readers well-versed with the case laws of...
Read More