+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Day

October 16, 2024
16
Oct

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

October 16, 2024
Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response (EDR) solutions and hide malicious activity. Trend Micro said it detected “threat actors attempting to integrate EDRSilencer in their attacks, repurposing it as a means of evading detection.” EDRSilencer, inspired by the NightHawk FireBlock tool...
Read More
16
Oct

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

October 16, 2024
The FIDO Alliance said it’s working to make passkeys and other credentials more easier to export across different providers and improve credential provider interoperability, as more than 12 billion online accounts become accessible with the passwordless sign-in method. To that end, the alliance said it has published a draft for a new set of specifications...
Read More
16
Oct

From Misuse to Abuse: AI Risks and Attacks

October 16, 2024
AI from the attacker’s perspective: See how cybercriminals are leveraging AI and exploiting its vulnerabilities to compromise systems, users, and even other AI applications Cybercriminals and AI: The Reality vs. Hype “AI will not replace humans in the near future. But humans who know how to use AI are going to replace those humans who...
Read More
16
Oct

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

October 16, 2024
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 (CVSS score: 7.5), a memory corruption bug in the Scripting Engine that could result in remote code execution when...
Read More
16
Oct

5 Techniques for Collecting Cyber Threat Intelligence

October 16, 2024
To defend your organization against cyber threats, you need a clear picture of the current threat landscape. This means constantly expanding your knowledge about new and ongoing threats. There are many techniques analysts can use to collect crucial cyber threat intelligence. Let’s consider five that can greatly improve your threat investigations. Pivoting on С2 IP...
Read More
16
Oct

BCI Introduces Minimum Stipend Guidelines for Junior Advocates

October 16, 2024
In a significant step toward addressing junior advocates’ financial challenges, the Bar Council of India (BCI) has issued new guidelines recommending a minimum stipend for junior lawyers working with senior advocates, law firms, and independent practitioners. The move follows a directive from the Delhi High Court dated July 29, after Advocate Simran Kumari raised concerns...
Read More
16
Oct

BCI Prohibits Use of “National” and “Indian” by Private Law Universities for Moot Court Competitions

October 16, 2024
On October 15, 2024, the Bar Council of India (BCI) issued a circular prohibiting private law universities from using terms such as “India,” “Indian,” “National,” “Bharat,” “Bhartiya,” and “Rashtriya” in connection with moot court competitions, conferences, and other law-related events. This move aims to prevent misleading representations and uphold the Emblems and Names (Prevention of...
Read More
16
Oct

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

October 16, 2024
A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript to slip past security guardrails. “The spear-phishing campaign’s impact has targeted various industries, with manufacturing companies, retail firms, and government agencies being the most affected,” Trend Micro said in a new analysis....
Read More
16
Oct

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

October 16, 2024
GitHub has released security updates for Enterprise Server (GHES) to address multiple issues, including a critical bug that could allow unauthorized access to an instance. The vulnerability, tracked as CVE-2024-9487, carries a CVS score of 9.5 out of a maximum of 10.0 “An attacker could bypass SAML single sign-on (SSO) authentication with the optional encrypted...
Read More
16
Oct

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

October 16, 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2024-28987 (CVSS score: 9.1), the vulnerability relates to a case of hard-coded credentials that could be abused to gain
Read More