Cyber – Page 8 – Welcome to APS Law

Jun

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

June 19, 2025adminuserCyber

Threat actors with suspected ties to Russia have been observed taking advantage of a Google account feature called application specific passwords (or app passwords) as part of a novel social engineering tactic designed to gain access to victims’ emails. Details of the highly targeted campaign were disclosed by Google Threat Intelligence Group (GTIG) and the...

Jun

Meta Adds Passkey Login Support to Facebook for Android and iOS Users

June 19, 2025adminuserCyber

Meta Platforms on Wednesday announced that it’s adding support for passkeys, the next-generation password standard, on Facebook. “Passkeys are a new way to verify your identity and login to your account that’s easier and more secure than traditional passwords,” the tech giant said in a post. Support for passkeys is expected to be available “soon”...

Jun

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

June 19, 2025adminuserCyber

Cybersecurity researchers have uncovered two local privilege escalation (LPE) flaws that could be exploited to gain root privileges on machines running major Linux distributions. The vulnerabilities, discovered by Qualys, are listed below – CVE-2025-6018 – LPE from unprivileged to allow_active in SUSE 15’s Pluggable Authentication Modules (PAM) CVE-2025-6019 – LPE from allow_active to root in

Jun

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

June 18, 2025adminuserCyber

A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed SERPENTINE#CLOUD by Securonix. It leverages “the Cloudflare Tunnel infrastructure and Python-based loaders to deliver memory-injected payloads through a chain of shortcut files and obfuscated

Jun

1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub

June 18, 2025adminuserCyber

A new multi-stage malware campaign is targeting Minecraft users with a Java-based malware that employs a distribution-as-service (DaaS) offering called Stargazers Ghost Network. “The campaigns resulted in a multi-stage attack chain targeting Minecraft users specifically,” Check Point researchers Jaromír Hořejší and Antonis Terefos said in a report shared with The Hacker News. “The malware was

Jun

FedRAMP at Startup Speed: Lessons Learned

June 18, 2025adminuserCyber

For organizations eyeing the federal market, FedRAMP can feel like a gated fortress. With strict compliance requirements and a notoriously long runway, many companies assume the path to authorization is reserved for the well-resourced enterprise. But that’s changing. In this post, we break down how fast-moving startups can realistically achieve FedRAMP Moderate authorization without derailing

Jun

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

June 18, 2025adminuserCyber

Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. “The malware enables data exfiltration (including credentials, browser data, and session tokens), remote access, and long-term persistence on infected systems,” Trend Micro researchers Jovit Samaniego, Aira Marcelo, Mohamed

Jun

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

June 10, 2025adminuserCyber

Cybersecurity researchers have shed light on a previously undocumented Rust-based information stealer called Myth Stealer that’s being propagated via fraudulent gaming websites. “Upon execution, the malware displays a fake window to appear legitimate while simultaneously decrypting and executing malicious code in the background,” Trellix security researchers Niranjan Hegde, Vasantha Lakshmanan

Jun

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

June 10, 2025adminuserCyber

Modern enterprise networks are highly complex environments that rely on hundreds of apps and infrastructure services. These systems need to interact securely and efficiently without constant human oversight, which is where non-human identities (NHIs) come in. NHIs — including application secrets, API keys, service accounts, and OAuth tokens — have exploded in recent years, thanks...

Jun

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

June 10, 2025adminuserCyber

Google has stepped in to address a security flaw that could have made it possible to brute-force an account’s recovery phone number, potentially exposing them to privacy and security risks. The issue, according to Singaporean security researcher “brutecat,” leverages an issue in the company’s account recovery feature. That said, exploiting the vulnerability hinges on several...

1 … 6 7 8 9 10 … 204

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

Meta Adds Passkey Login Support to Facebook for Android and iOS Users

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub

FedRAMP at Startup Speed: Lessons Learned

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta