+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Month

September 2024
04
Sep

Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

September 4, 2024
Google has released its monthly security updates for the Android operating system to address a known security flaw that it said has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-32896 (CVSS score: 7.8), relates to a case of privilege escalation in the Android Framework component. According to the description of...
Read More
04
Sep

Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

September 4, 2024
A new supply chain attack technique targeting the Python Package Index (PyPI) registry has been exploited in the wild in an attempt to infiltrate downstream organizations. It has been codenamed Revival Hijack by software supply chain security firm JFrog, which said the attack method could be used to hijack 22,000 existing PyPI packages and result...
Read More
04
Sep

Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers

September 4, 2024
Zyxel has released software updates to address a critical security flaw impacting certain access point (AP) and security router versions that could result in the execution of unauthorized commands. Tracked as CVE-2024-7261 (CVSS score: 9.8), the vulnerability has been described as a case of operating system (OS) command injection. “The improper neutralization of special elements...
Read More
04
Sep

The New Effective Way to Prevent Account Takeovers

September 4, 2024
Account takeover attacks have emerged as one of the most persistent and damaging threats to cloud-based SaaS environments. Yet despite significant investments in traditional security measures, many organizations continue to struggle with preventing these attacks. A new report, “Why Account Takeover Attacks Still Succeed, and Why the Browser is Your Secret Weapon in Stopping Them”...
Read More
04
Sep

Clearview AI Faces €30.5M Fine for Building Illegal Facial Recognition Database

September 4, 2024
The Dutch Data Protection Authority (Dutch DPA) has imposed a fine of €30.5 million ($33.7 million) against facial recognition firm Clearview AI for violating the General Data Protection Regulation (GDPR) in the European Union (E.U.) by building an “illegal database with billions of photos of faces,” including those of Dutch citizens. “Facial recognition is a...
Read More
04
Sep

Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

September 4, 2024
A new malware campaign is spoofing Palo Alto Networks’ GlobalProtect VPN software to deliver a variant of the WikiLoader (aka WailingCrab) loader by means of a search engine optimization (SEO) campaign. The malvertising activity, observed in June 2024, is a departure from previously observed tactics wherein the malware has been propagated via traditional phishing emails,...
Read More
03
Sep

2nd Manipal International Negotiation Competition 2024

September 3, 2024
About the Competition: With Negotiation gaining traction in the recent times as a preferred means of dispute resolution,Faculty of Law, Manipal University Jaipur is organizing the 2nd Edition of the International Negotiation Competition, which aims to provide a platform that reflects the ever growing expectation of clients to utilize other cost-effective alternative dispute resolution mechanisms...
Read More
03
Sep

Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

September 3, 2024
A hacktivist group known as Head Mare has been linked to cyber attacks that exclusively target organizations located in Russia and Belarus. “Head Mare uses more up-to-date methods for obtaining initial access,” Kaspersky said in a Monday analysis of the group’s tactics and tools. “For instance, the attackers took advantage of the relatively recent CVE-2023-38831...
Read More
03
Sep

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

September 3, 2024
Cybersecurity researchers have unpacked the inner workings of a new ransomware variant called Cicada3301 that shares similarities with the now-defunct BlackCat (aka ALPHV) operation. “It appears that Cicada3301 ransomware primarily targets small to medium-sized businesses (SMBs), likely through opportunistic attacks that exploit vulnerabilities as the initial access vector,” cybersecurity
Read More
03
Sep

Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

September 3, 2024
Mobile users in Brazil are the target of a new malware campaign that delivers a new Android banking trojan named Rocinante. “This malware family is capable of performing keylogging using the Accessibility Service, and is also able to steal PII from its victims using phishing screens posing as different banks,” Dutch security company ThreatFabric said....
Read More
1 … 18 19 20 21