Blog
US, South Korea and Japan Launch Group to Tackle North Korean Hacking
The FBI has attributed recent cryptocurrency hacks to North Korean-sponsored threat actors, highlighting the need for increased cybersecurity cooperation among liberal democracies in the Pacific.
QNAP Warns of Critical Command Injection Flaws in QTS OS, Apps
The first vulnerability, tracked as CVE-2023-23368, allows remote attackers to execute commands via a network. The second vulnerability, identified as CVE-2023-23369, can also be exploited by remote attackers.
Socks5Systemz Proxy Botnet Infects 10,000 Systems Worldwide
The botnet uses a domain generation algorithm (DGA) to connect with its command and control server and can be instructed to establish backconnect server connections, allowing infected devices to be used as proxy servers.
Iranian Hackers Launches Destructive Cyberattacks on Israeli Tech and Education Sectors
Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to deploy previously undocumented wiper malware. The intrusions, which took place as recently as October, have been...
Apple ‘Find My’ Network can be Abused to Steal Keylogged Passwords
Researchers at Positive Security demonstrated that by integrating a keylogger with a Bluetooth transmitter into a USB keyboard, passwords and other sensitive data typed on the keyboard can be relayed through the Find My network via Bluetooth.
HHS: Healthcare Data Breaches Impact 88 Million Americans This Year
In 2023 alone, there has been a 60% year-on-year increase in large breaches impacting over 88 million individuals, with hacking accounting for 77% of these breaches, according to the HHS.
Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel
Google is warning of multiple threat actors sharing a public proof-of-concept (PoC) exploit that leverages its Calendar service to host command-and-control (C2) infrastructure. The tool, called Google Calendar RAT (GCR), employs Google Calendar Events for C2 using a...
Apple Warns Armenians of State-Sponsored Hacking Attempts
The ongoing tensions between Armenia and Azerbaijan, particularly around the disputed Nagorno-Karabakh region, have created a backdrop for the use of Pegasus spyware, targeting various individuals including politicians, activists, and journalists.
Discord Will Switch to Temporary File Links to Block Malware Delivery
Discord has been a breeding ground for cybercriminals, with thousands of malware operations exploiting its CDN URLs to distribute and install malicious payloads on compromised systems.
Europe Clamps Down on Meta Ad Personalization
The European Data Protection Board has directed the Irish Data Protection Commissioner to restrict Meta platforms from using customer's personal data for ad personalization, citing a violation of GDPR.
FREE GUIDE