Cyber – Page 166 – Welcome to APS Law

May

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

May 27, 2024Cyber

The Pakistan-nexus Transparent Tribe actor has been linked to a new set of attacks targeting Indian government, defense, and aerospace sectors using cross-platform malware written in Python, Golang, and Rust. “This cluster of activity spanned from late 2023 to April 2024 and is anticipated to persist,” the BlackBerry Research and Intelligence Team said in a technical report

May

Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data

May 25, 2024Cyber

Cybersecurity researchers have discovered a critical security flaw in an artificial intelligence (AI)-as-a-service provider Replicate that could have allowed threat actors to gain access to proprietary AI models and sensitive information. “Exploitation of this vulnerability would have allowed unauthorized access to the AI prompts and results of all Replicate’s platform customers,”

May

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

May 24, 2024Cyber

The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws in Ivanti Connect Secure (ICS) involved the actor creating rogue virtual machines (VMs) within its VMware environment. “The adversary created their own rogue VMs within the VMware environment, leveraging compromised vCenter Server access,” MITRE

May

Fake Antivirus Websites Deliver Malware to Android and Windows Devices

May 24, 2024Cyber

Threat actors have been observed making use of fake websites masquerading as legitimate antivirus solutions from Avast, Bitdefender, and Malwarebytes to propagate malware capable of stealing sensitive information from Android and Windows devices. “Hosting malicious software through sites which look legitimate is predatory to general consumers, especially those who look to protect their devices

May

How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

May 24, 2024Cyber

Don’t be fooled into thinking that cyber threats are only a problem for large organizations. The truth is that cybercriminals are increasingly targeting smaller businesses, and they’re getting smarter every day. Join our FREE webinar “Navigating the SMB Threat Landscape: Key Insights from Huntress’ Threat Report,” in which Jamie Levy — Director of Adversary Tactics...

May

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

May 24, 2024Cyber

Introduction The infamous Colonial pipeline ransomware attack (2021) and SolarWinds supply chain attack (2020) were more than data leaks; they were seismic shifts in cybersecurity. These attacks exposed a critical challenge for Chief Information Security Officers (CISOs): holding their ground while maintaining control over cloud security in the accelerating world of DevOps.

May

Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP

May 24, 2024Cyber

Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild. Assigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Clément Lecigne of Google’s Threat Analysis Group and Brendon Tiszka of

May

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

May 24, 2024Cyber

Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that’s associated with a known backdoor called RustDoor. The software supply chain attack, tracked as CVE-2024-4978, impacts JAVS Viewer v8.3.7, a component of the JAVS Suite 8 that allows users to create, manage, publish,

May

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

May 24, 2024Cyber

Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to be a successor to ShadowPad. “The origin of BLOODALCHEMY and Deed RAT is ShadowPad and given the history of ShadowPad being utilized in numerous APT

May

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

May 23, 2024Cyber

Ransomware attacks targeting VMware ESXi infrastructure following an established pattern regardless of the file-encrypting malware deployed. “Virtualization platforms are a core component of organizational IT infrastructure, yet they often suffer from inherent misconfigurations and vulnerabilities, making them a lucrative and highly effective target for threat actors to abuse,”

1 … 164 165 166 167 168 … 201

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

Fake Antivirus Websites Deliver Malware to Android and Windows Devices

How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta