7 top software supply chain security tools
As the fallout from the Apache Log4J vulnerabilities earlier this year shows, the biggest risks in enterprise software today are not necessarily with insecure code written directly by in-house...
Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives
By:
Jan 30, 2024NewsroomCyber Crime / Malware
A Brazilian law enforcement operation has led to the arrest of several Brazilian operators in charge of the Grandoreiro malware.
The Federal Police of...
Solana Foundation warns about security incident with Mailchimp
Solana Foundation, the non-profit organization of the Solana Network, disclosed on Jan. 14 a security incident involving its email service provider Mailchimp. According to an email sent to users and...
With Black Friday-Cyber Monday looming, Grelos skimmer tied to Magecart poses threat
By:
Steve Zurier
A new Grelos skimmer variant tied to Magecart Group could potentially lure online shoppers to...
Technical Advisory – Lansweeper Privilege Escalation via CSRF Using HTTP Method Interchange (CVE-2020-13658)
Vendor: Lansweeper Software
Vendor URL: https://www.lansweeper.com/
Versions affected: 8.0.130.17 known affected versions, others likely
Systems Affected: Windows 10
Authors: Joshua Dow , Daniel King
Advisory URL / CVE Identifier: CVE-2020-13658
Risk: High
Summary:
Lansweeper is an...
Yellow Brick Market is Gone Once Again
Yellow Brick Market, “the ugliest darknet market to date,” has disappeared with cryptocurrency belonging to the users of the marketplace. Did they “exit scam” or did law enforcement arrest...
New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks
A pro-democracy Hong Kong site was used to launch watering-hole attacks that planted a powerful macOS backdoor that researchers dubbed DazzleSpy.
A new family of cyber-espionage malware targeting macOS and...
NFT artwork by humanoid robot sells at auction for nearly $700,000
A digital artwork by humanoid robot Sophia was sold at auction on Thursday for $688,888 in the form of a Non-Fungible Token (NFT). NFTs, a digital signature saved on blockchain...
New Golang worm turns Windows and Linux servers into monero miners
By:
Steve Zurier
A new worm written in Golang turns Windows and Linux servers into miners of the...
