Your cart is currently empty!
Author: Omar
New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities
Mar 06, 2024NewsroomCyber Attack / Malware A financial entity in Vietnam was the target of a previously undocumented threat actor called Lotus Bane that was first detected in March 2023. Singapore-headquartered Group-IB described the hacking outfit as an advanced persistent threat group that’s believed to have been active since at least 2022. The exact specifics…
Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws
Mar 06, 2024NewsroomVulnerability / Zero Day Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild. The shortcomings are listed below – CVE-2024-23225 – A memory corruption issue in Kernel that an attacker with arbitrary kernel read and write capability can exploit…
NSA shares zero-trust guidance to limit adversaries on the network
The National Security Agency is sharing new guidance to help organizations limit an adversary’s movement on the internal network by adopting zero-trust framework principles. A zero-trust security architecture requires strict controls for accessing resources on the network, be they inside or outside the physical perimeter, to minimize the impact of a breach. Compared to the…
Apple fixes two new iOS zero-days exploited in attacks on iPhones
Apple released emergency security updates to fix two iOS zero-day vulnerabilities that were exploited in attacks on iPhones. “Apple is aware of a report that this issue may have been exploited,” the company said in an advisory issued on Tuesday. The two bugs were found in the iOS Kernel (CVE-2024-23225) and RTKit (CVE-2024-23296), both allowing attackers with…
New WogRAT malware abuses online notepad service to store malware
A new malware dubbed ‘WogRAT’ targets both Windows and Linux in attacks abusing an online notepad platform named ‘aNotepad’ as a covert channel for storing and retrieving malicious code. According to AhnLab Security Intelligence Center (ASEC) researchers, who named the malware from a string reading ‘WingOfGod,’ it has been active since at least late 2022,…
Microsoft is killing off the Android apps in Windows 11 feature
Microsoft has unexpectedly announced they are ending support for the Windows Subsystem for Android next year on March 5th. The Windows Subsystem for Android (WSA) allows users to run native Android apps in a virtualized environment with sound, graphics, and network connectivity. Released in October 2021, WSA quickly became a novelty for allowing users to install apps…
U.S. sanctions Predator spyware operators for spying on Americans
The U.S. has imposed sanctions on two individuals and five entities linked to the development and distribution of the Predator commercial spyware used to target Americans, including government officials and journalists. “Today, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) designated two individuals and five entities associated with the Intellexa Consortium for…
In cyberattacks, hackers use QEMU to covertly tunnel network traffic.
In a cyberattack against a sizable business, malicious actors were discovered using the open-source hypervisor platform QEMU as a tunneling device. Running other operating systems as guests on a computer is possible with the free emulator and hypervisor QEMU. Threat actors used QEMU to build virtual network interfaces and a socket-type network device to connect…
Users log out of Facebook and Instagram, and passwords are broken.
Worldwide Facebook and Instagram users have been logged out of the sites and are having trouble logging in, reporting errors that their passwords are incorrect. People all over the world, including the USA, Europe, and Asia, are affected by this outage, which started less than an hour ago.  , According to numerous reports, Downdetector, a…
Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware
Mar 05, 2024NewsroomMalware / Cyber Threat North Korean threat actors have exploited the recently disclosed security flaws in ConnectWise ScreenConnect to deploy a new malware called TODDLERSHARK. According to a report shared by Kroll with The Hacker News, TODDLERSHARK overlaps with known Kimsuky malware such as BabyShark and ReconShark. “The threat actor gained access to…