Uncategorized

New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs 14/06/2023 at 14:34 By A new Golang-based information stealer called Skuld has compromised Windows systems across Europe, Southeast Asia, and the U.S. “This new malware strain tries to steal sensitive information from its victims,” Trellix researcher Ernesto Fernández Provecho said in a Tuesday analysis. “To accomplish this […]

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits 14/06/2023 at 13:46 By At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be

Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin 14/06/2023 at 11:49 By A security flaw has been uncovered in the WooCommerce Stripe Gateway WordPress plugin that could lead to the unauthorized disclosure of sensitive information. The flaw, tracked as CVE-2023-34000, impacts versions 7.4.0 and below. It was addressed by the plugin maintainers in version 7.4.1,

Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software 14/06/2023 at 11:02 By Microsoft has rolled out fixes for its Windows operating system and other software components to remediate major security shortcomings as part of Patch Tuesday updates for June 2023. Of the 73 flaws, six are rated Critical, 63 are rated Important, two

Matt Hillary hired as VP, Security and CISO at Drata 13/06/2023 at 21:48 By Matt Hillary has been hired as VP, Security and Chief Information Security Officer at Drata. Hillary brings more than 15 years of security experience. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

99% of organizations expect identity-related compromise this year 13/06/2023 at 21:19 By Current economic conditions and technology development have shown a rise in identity-based cybersecurity exposure, according to a report by CyberArk. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Top 5 Ways Cybercriminals Engage in Credential Harvesting: Protecting Your Login Credentials 13/06/2023 at 19:21 By In today’s digital world, login credentials are the keys to the kingdom. Whether it’s your online banking, your social media accounts, or your work accounts, your login credentials are essential for accessing your personal information. This article is an

Report highlights key threats disrupting businesses 13/06/2023 at 19:21 By A new report highlights the top threats observed in the first half of 2023, and emerging cybersecurity trends impacting the healthcare and financial services industries.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer 13/06/2023 at 18:50 By A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what’s an advanced attack targeting users in Europe, the U.S., and Latin America. “DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF attachment

Over Half of Security Leaders Lack Confidence in Protecting App Secrets, Study Reveals 13/06/2023 at 17:49 By It might come as a surprise, but secrets management has become the elephant in the AppSec room. While security vulnerabilities like Common Vulnerabilities and Exposures (CVEs) often make headlines in the cybersecurity world, secrets management remains an overlooked

47% of organizations struggle with detecting and mitigating threats 13/06/2023 at 17:19 By A new study reveals 70% of IT leaders in financial services reported a significant increase in data breaches compared to previous years. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

68% of organizations expect employee churn-driven cyber issues in 2023 13/06/2023 at 16:53 By A new report shows how the tension between difficult economic conditions and the pace of technology innovation influences the growth of identity-led cybersecurity exposure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations 13/06/2023 at 16:53 By “Dozens” of organizations across the world have been targeted as part of a broad business email compromise (BEC) campaign that involved the use of adversary-in-the-middle (AitM) techniques to carry out the attacks. “Following a successful phishing attempt, the threat actor gained initial access

Honeypot Recon: Global Database Threat Landscape 13/06/2023 at 16:14 By In today’s digital era, the importance of securing databases cannot be overstated. As more and more global businesses and organizations rely on DBMS systems to store tons of sensitive information, the risk of targeted attacks and data breaches continues to increase. This article is an

Rushing into generative AI is risky: How to protect data 13/06/2023 at 16:14 By There’s no doubt that generative AI will be a useful tool for businesses, but it requires careful implementation. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack 13/06/2023 at 14:17 By The U.S. Department of Justice (DoJ) has charged two Russian nationals in connection with masterminding the 2014 digital heist of the now-defunct cryptocurrency exchange Mt. Gox. According to unsealed indictments released last week, Alexey Bilyuchenko, 43, and Aleksandr Verner, 29,

Webinar – Mastering API Security: Understanding Your True Attack Surface 13/06/2023 at 14:17 By Believe it or not, your attack surface is expanding faster than you realize. How? APIs, of course! More formally known as application programming interfaces, API calls are growing twice as fast as HTML traffic, making APIs an ideal candidate for new

Critical FortiOS and FortiProxy Vulnerability Likely Exploited – Patch Now! 13/06/2023 at 10:17 By Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been “exploited in a limited number of cases” in attacks targeting government, manufacturing, and critical infrastructure sectors. The vulnerability, tracked as CVE-2023-27997 (CVSS score: 9.2), concerns a heap-based buffer overflow vulnerability in

Bank fraud warnings are the most common text scam 12/06/2023 at 20:36 By According to research by the Federal Trade Commission, the most common form of text message scam reported to the FTC were false bank fraud warnings. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

OSHA updates worker safety plan for poor air quality 12/06/2023 at 18:54 By Due to wildfires in Canada causing smoke in the northeastern parts of the U.S., OSHA offered additional information to protect outdoor workers. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source