Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows
Concerns over a critical authentication bypass vulnerability in certain Fortinet appliances heightened this week with the release of proof-of-concept (PoC) exploit code and at least one vulnerability scanner for...
Feature-Rich ‘Alchimist’ Cyberattack Framework Targets Windows, Mac, Linux Environments
Researchers have uncovered a potentially dangerous cyberattack framework targeting Windows, Linux, and Mac systems that they assess is likely already being used in the wild.The framework consists of a...
Novel npm Timing Attack Allows Corporate Targeting
A novel timing attack has emerged for targeting private corporate software packages hosted in the npm code repository. The idea is to uncover the legitimate offerings and then create...
Newly Introduced HackerOne Assets Goes Beyond Attack Surface Management To Close Security Gaps
SAN FRANCISCO, October 13, 2022: HackerOne, the leader in Attack Resistance Management, today announced the general availability of its HackerOne Assets product. Assets combines the core capabilities of Attack...
Cyberattackers Spoof Google Translate in Unique Phishing Tactic
Attackers are spoofing Google Translate in an ongoing phishing campaign that uses a common JavaScript coding technique to bypass email security scanners. Leveraging trust in Google Translate is a...
Nudge Security Launches Platform With Humans in Mind
After months of speculation and input from security, compliance, and IT operations professionals, Nudge Security has launched its new software-as-a-service (SaaS) platform with the promise of making the increasingly...
QAKBOT Attacks Spike Amid Concerning Cybercriminal Collaborations
The QAKBOT malware group resumed expanding its access-as-a-service network in early September, successfully compromising hundreds of companies with common second-stage payloads, including Emotet malware and two popular attack platforms,...
Barely halfway and October’s the ‘biggest month’ in crypto hacks: Chainalysis
Blockchain analytics firm Chainalysis has labeled October 2022 as “the biggest month in the biggest year ever for hacking activity” with the total hacked value for the month nearly...
Hodlers prefer centralized exchanges over DeFi for security: Chainalysis
Despite the rise of decentralized finance (DeFi), cryptocurrency investors appear to be sticking to centralized exchanges (CEXs) over DeFi tools, according to a new report.Crypto investors are more comfortable...
WhatsApp Users Beware: Dangerous Mobile Trojan Being Distributed via Malicious Mod
Security researchers have detected a threat actor distributing a data-stealing mobile Trojan via a spoofed version of YoWhatsApp, a relatively widely used, modified version of the WhatsApp messaging application.Users...
