Initial Access Broker Market Booms, Posing Growing Threat to Enterprises
Names such as Novelli, orangecake, Pirat-Networks, SubComandanteVPN, and zirochka are unlikely to mean anything to a vast majority of enterprise security teams. But for ransomware operators and other cybercriminals...
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware
By:
Jan 17, 2023Ravie LakshmananThreat Response / Malware
New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub Codespaces to deliver malware...
New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild
By:
Jan 16, 2023Ravie LakshmananThreat Landscape / Malware
Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)'s Hive multi-platform malware...
Java, .NET Developers Prone to More Frequent Vulnerabilities
More than three-quarters of applications written in Java and .NET have at least one vulnerability from the OWASP Top 10, a list of software weaknesses that developers typically use...
Cross-border crypto scammers on the hit list for EU agencies
By the end of 2022, scammers shifted their focus to duping crypto investors who desperately tried to recoup their year-long losses. An international law enforcement operation led by European...
Binance, Huobi team up to recover $2.5M from Harmony One hackers
Security teams at crypto exchanges Binance and Huobi worked together to freeze and recover 121 Bitcoin (BTC) from hackers behind the Harmony bridge exploit. In a tweet, Binance CEO Changpeng...
Solana Foundation warns about security incident with Mailchimp
Solana Foundation, the non-profit organization of the Solana Network, disclosed on Jan. 14 a security incident involving its email service provider Mailchimp. According to an email sent to users and...
Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident
By:
Jan 14, 2023Ravie LakshmananDevOps / Data Security
DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee's laptop and leveraged malware to steal their two-factor authentication-backed...
Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability
By:
Jan 14, 2023Ravie LakshmananServer Security / Patch Management
A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability that has come under...
DeFi was the most attacked ecosystem in 2022: Finance Redefined
Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you significant developments over the last week.The DeFi ecosystem started...
