#HackerNews Jun 02, 2023Ravie LakshmananCyber Espionage / APT U.S. and South Korean intelligence agencies have issued a new alert warning of North Korean cyber actors' use of social engineering tactics to strike think tanks, academia, and ne...
Friday, June 2, 2023
North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks #Cybersecurity
Wednesday, May 31, 2023
Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities #Cybersecurity
#HackerNews May 31, 2023Ravie LakshmananData protection / Cyber Threat Improperly deactivated and abandoned Salesforce Sites and Communities (aka Experience Cloud) could pose severe risks to organizations, leading to unauthorized access to s...
Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months #Cybersecurity
#HackerNews May 31, 2023Ravie LakshmananNetwork Security / Zero Day Enterprise security firm Barracuda on Tuesday disclosed that a recently patched zero-day flaw in its Email Security Gateway (ESG) appliances had been abused by threat actors...
Tuesday, May 30, 2023
Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users #Cybersecurity
#HackerNews May 30, 2023Ravie LakshmananMobile Security / Android A new open source remote access trojan (RAT) called DogeRAT targets Android users primarily located in India as part of a sophisticated malware campaign. The malware is distri...
Monday, May 29, 2023
Don't Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims #Cybersecurity
#HackerNews A new phishing technique called "file archiver in the browser" can be leveraged to "emulate" a file archiver software in a web browser when a victim visits a .ZIP domain. "With this phishing attack, you simulate a file archiver softw...
PyPI Implements Mandatory Two-Factor Authentication for Project Owners #Cybersecurity
#HackerNews May 29, 2023Ravie LakshmananSupply Chain / Programming The Python Package Index (PyPI) announced last week that every account that maintains a project on the official third-party software repository will be required to turn on tw...