April 2024 – Page 4 – Welcome to APS Law

+91-9820096678

admin@apslaw.co.in

Mon - Sat 09:00-22:00

Month

April 2024

Apr

Case Analysis: State of Bombay v. K.P. Krishnan & Ors., (1961) | Administrative Discretion

April 26, 2024Legal

In the case of State of Bombay v. K.P. Krishnan & Ors. (1961), the issue revolved around the interpretation of certain provisions of the Industrial Disputes Act. Specifically, the court examined whether disputes falling under Section 12(5) could be referred to independently of Section 10(1), which pertained to the government’s control over strikes. The Supreme...

Apr

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

April 26, 2024Cyber

Threat actors are attempting to actively exploit a critical security flaw in the WP‑Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all versions of the plugin prior to 3.9.2.0. “This vulnerability, a SQL injection (SQLi) flaw, poses a...

Apr

North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

April 25, 2024Cyber

The North Korea-linked threat actor known as Lazarus Group employed its time-tested fabricated job lures to deliver a new remote access trojan called Kaolin RAT. The malware could, “aside from standard RAT functionality, change the last write timestamp of a selected file and load any received DLL binary from [command-and-control] server,” Avast security researcher Luigino

Apr

Network Threats: A Step-by-Step Attack Demonstration

April 25, 2024Cyber

Follow this real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration. See how attackers remain undetected with the simplest tools and why you need multiple choke points in your defense strategy. Surprisingly, most network attacks are not exceptionally sophisticated, technologically advanced, or reliant on zero-day tools that exploit

Apr

DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

April 25, 2024Cyber

The U.S. Department of Justice (DoJ) on Wednesday announced the arrest of two co-founders of a cryptocurrency mixer called Samourai and seized the service for allegedly facilitating over $2 billion in illegal transactions and for laundering more than $100 million in criminal proceeds. To that end, Keonne Rodriguez, 35, and William Lonergan Hill, 65, have been charged

Apr

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

April 25, 2024Cyber

Google has once again pushed its plans to deprecate third-party tracking cookies in its Chrome web browser as it works to address outstanding competition concerns from U.K. regulators over its Privacy Sandbox initiative. The tech giant said it’s working closely with the U.K. Competition and Markets Authority (CMA) and hopes to achieve an agreement by the end...

Apr

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

April 25, 2024Cyber

A new malware campaign leveraged two zero-day flaws in Cisco networking gear to deliver custom malware and facilitate covert data collection on target environments. Cisco Talos, which dubbed the activity ArcaneDoor, attributing it as the handiwork of a previously undocumented sophisticated state-sponsored actor it tracks under the name UAT4356 (aka Storm-1849 by Microsoft). “

Apr

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

April 24, 2024Cyber

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Monday sanctioned two firms and four individuals for their involvement in malicious cyber activities on behalf of the Iranian Islamic Revolutionary Guard Corps Cyber Electronic Command (IRGC-CEC) from at least 2016 to April 2021. This includes the front companies Mehrsam Andisheh Saz Nik (MASN) and Dadeh

Apr

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

April 24, 2024Cyber

Cybersecurity researchers have discovered an ongoing attack campaign that’s leveraging phishing emails to deliver malware called SSLoad. The campaign, codenamed FROZEN#SHADOW by Securonix, also involves the deployment of Cobalt Strike and the ConnectWise ScreenConnect remote desktop software. “SSLoad is designed to stealthily infiltrate systems, gather sensitive

Apr

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

April 24, 2024Cyber

Security vulnerabilities uncovered in cloud-based pinyin keyboard apps could be exploited to reveal users’ keystrokes to nefarious actors. The findings come from the Citizen Lab, which discovered weaknesses in eight of nine apps from vendors like Baidu, Honor, iFlytek, OPPO, Samsung, Tencent, Vivo, and Xiaomi. The only vendor whose keyboard app did not have any security

1 2 3 4 5 6 … 20

Case Analysis: State of Bombay v. K.P. Krishnan & Ors., (1961) | Administrative Discretion

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

Network Threats: A Step-by-Step Attack Demonstration

DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

Recent Posts

Recent Comments

Archives

Categories

Meta