July 2024 – Page 18 – Welcome to APS Law

+91-9820096678

admin@apslaw.co.in

Mon - Sat 09:00-22:00

Month

July 2024

Jul

GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel

July 9, 2024Cyber

Military personnel from Middle East countries are the target of an ongoing surveillanceware operation that delivers an Android data-gathering tool called GuardZoo. The campaign, believed to have commenced as early as October 2019, has been attributed to a Houthi-aligned threat actor based on the application lures, command-and-control (C2) server logs, targeting footprint, and the attack

Jul

Cybersecurity Agencies Warn of China-linked APT40’s Rapid Exploit Adaptation

July 9, 2024Cyber

Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K., and the U.S. have released a joint advisory about a China-linked cyber espionage group called APT40, warning about its ability to co-opt exploits for newly disclosed security flaws within hours or days of public release. “APT 40 has previously targeted organizations in...

Jul

Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

July 9, 2024Cyber

Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a “complex and persistent” supply chain attack. “This attack stands out due to the high variability across packages,” Phylum said in an analysis published last week. “The attacker has cleverly hidden...

Jul

Call for Papers: NLIU Law Review Volume XIV Issue I

July 8, 2024Legal

NLIU Law Review is accepting submissions of manuscripts for publication in Volume XIV Issue I of the Journal. About the Journal The NLIU Law Review is the flagship journal of the National Law Institute University, Bhopal. It is a peer-reviewed academic law journal, published biannually by the students of the University. The Law Review aims...

Jul

New APT Group “CloudSorcerer” Targets Russian Government Entities

July 8, 2024Cyber

A previously undocumented advanced persistent threat (APT) group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control (C2) and data exfiltration. Cybersecurity firm Kaspersky, which discovered the activity in May 2024, the tradecraft adopted by the threat actor bears similarities with that of CloudWizard, but pointed

Jul

Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites

July 8, 2024Cyber

An analysis of information-stealing malware logs published on the dark web has led to the discovery of thousands of consumers of child sexual abuse material (CSAM), indicating how such information could be used to combat serious crimes. “Approximately 3,300 unique users were found with accounts on known CSAM sources,” Recorded Future said in a proof-of-concept...

Jul

New Ransomware-as-a-Service ‘Eldorado’ Targets Windows and Linux Systems

July 8, 2024Cyber

An emerging ransomware-as-a-service (RaaS) operation called Eldorado comes with locker variants to encrypt files on Windows and Linux systems. Eldorado first appeared on March 16, 2024, when an advertisement for the affiliate program was posted on the ransomware forum RAMP, Singapore-headquartered Group-IB said. The cybersecurity firm, which infiltrated the ransomware group, noted that its

Jul

5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

July 8, 2024Cyber

Events like the recent massive CDK ransomware attack – which shuttered car dealerships across the U.S. in late June 2024 – barely raise public eyebrows anymore. Yet businesses, and the people that lead them, are justifiably jittery. Every CISO knows that cybersecurity is an increasingly hot topic for executives and board members alike. And when...

Jul

Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries

July 8, 2024Cyber

Financial institutions in Latin America are being threatened by a banking trojan called Mekotio (aka Melcoz). That’s according to findings from Trend Micro, which said it recently observed a surge in cyber attacks distributing the Windows malware. Mekotio, known to be actively put to use since 2015, is known to target Latin American countries like...

Jul

Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

July 8, 2024Cyber

Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or wipe source code, and even plant backdoors. The vulnerabilities, according to SonarSource researchers Thomas Chauchefoin and Paul Gerste, are listed below – CVE-2024-39930 (CVSS

1 … 16 17 18 19 20 … 22

GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel

Cybersecurity Agencies Warn of China-linked APT40’s Rapid Exploit Adaptation

Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

Call for Papers: NLIU Law Review Volume XIV Issue I

New APT Group “CloudSorcerer” Targets Russian Government Entities

Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites

New Ransomware-as-a-Service ‘Eldorado’ Targets Windows and Linux Systems

5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries

Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

Recent Posts

Recent Comments

Archives

Categories

Meta