[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Malicious Package on PyPI Hides Behind Image Files, Spreads Via GitHub
The findings indicate that PyPI malicious packages and their obfuscation techniques are evolving
> Medibank Confirms Data Stolen in Breach is Now Available Online
The leaked data includes personal data like names, addresses and phone numbers, among others
> We sign code now
Sigstore announced the general availability of its free and ecosystem-agnostic software signing service two weeks ago, giving developers a way to sign, verify and protect their software projects and the dependencies they rely on. Trail of Bits is absolutely thrilled to be a part of the project, and...
> Advanced RAT AgentTesla Most Prolific Malware in October
Info-stealers take top three spots, says Check Point
> Instagram Influencer Gets 11 Years for Money Laundering
Man known as “Hushpuppi” linked to fraud and business email compromise
> AWS Organizations Defaults & Pivoting
How to abuse AWS Organizations' default behavior and lateral movement capabilities.
> Microsoft Patches Six Zero-Day Bugs this Month
Patch Tuesday updates require urgent action from sysadmins
> Insider Risk on the Rise: 12% of Employees Take IP When Leaving Jobs
The data comes from workforce cyber intelligence and security company Dtex
> Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)
> SEC Announces 'Enforcement Action' For SolarWinds Over 2020 Hack
In a recent 8-K filing with the SEC, the firm said it reached an agreement with shareholders
> Conti Affiliates Black Basta, BlackByte Continue to Attack Critical Infrastructure
Between February and July, 81 victim organizations were listed on the groups' data leak sites
> Satys
Le groupe aéronautique Satys, sous-traitant d'Airbus, a été victime d'une cyberattaque massive qui a nécessité la mise en place d'une cellule de crise et la restauration de ses systèmes informatiques. L'attaque a impliqué le ransomware Dagon, une évolution de MountLocker et de Quantum.
> SMBs Fear Security Budget Cuts as Inflation Bites
Concerns come amid worries over ransomware surge
> Swiss Re: Cyber-Insurance Industry Must Reform
Some 90% of risk is still uninsured, warns industry giant
> Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit syst...
> Silk Road Thief Pleads Guilty to $3.4bn Raid
Man stole 50,000 Bitcoin from notorious dark web marketplace
> Vultur Android Banking Trojan Reaches 100,000+ Downloads on Google Play Store
The dropper hides behind a fake utility app with limited permissions and a small footprint
> San Diego Unified School District
Des données médicales d'étudiants de San Diego ont été compromises lors d'une cyberattaque en octobre. Les noms et informations médicales des étudiants ont été compromis. Les responsables ont rapidement sécurisé le réseau, lancé une enquête et informé les autorités. Des mesures de sécurité supplémen...
> Medibank Refuses to Pay Ransom After Data Breach
Medibank believes there is a limited chance paying a ransom would return customers' data
> Android RAT Group Targets Indian Defense Personnel
The app asked for several permissions, including camera, microphone, internet and storage