Dec 27, 2023NewsroomZero-Day / Email Security Barracuda has revealed that Chinese threat actors exploited a new zero-day in its Email Security Gateway (ESG) appliances to deploy backdoor on a “limited number” of devices. Tracked as CVE-2023-7102, the issue relates to a case of arbitrary code execution that resides within a third-party and open-source library Spreadsheet::ParseExcel
AdMx-HyPx-AlpHy
Dec 27, 2023NewsroomZero-Day / Vulnerability A new zero-day security flaw has been discovered in the Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the login functionality and is the result of an incomplete patch for another critical vulnerability (CVE-2023-49070,
Dec 28, 2023NewsroomMalware / Cyber Threat A new malware loader is being used by threat actors to deliver a wide range of information stealers such as Lumma Stealer (aka LummaC2), Vidar, RecordBreaker (aka Raccoon Stealer V2), and Rescoms. Cybersecurity firm ESET is tracking the trojan under the name Win/TrojanDownloader.Rugmi. “This malware is a loader with
Dec 28, 2023NewsroomSpyware / Hardware Security The Operation Triangulation spyware attacks targeting Apple iOS devices leveraged never-before-seen exploits that made it possible to even bypass pivotal hardware-based security protections erected by the company. Russian cybersecurity firm Kaspersky, which discovered the campaign at the beginning of 2023 after becoming one of the targets, described it as
Dec 28, 2023NewsroomCloud Security / Data Protection Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster to escalate their privileges. “An attacker who has compromised the Fluent Bit logging container could combine that access with high privileges required
Dec 29, 2023NewsroomMalware / Endpoint Security Microsoft on Thursday said it’s once again disabling the ms-appinstaller protocol handler by default following its abuse by multiple threat actors to distribute malware. “The observed threat actor activity abuses the current implementation of the ms-appinstaller protocol handler as an access vector for malware that may lead to ransomware
Dec 29, 2023NewsroomMalware / Cyber Threat Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as AppleSeed, Meterpreter, and TinyNuke to seize control of compromised machines. South Korea-based cybersecurity company AhnLab attributed the activity to an advanced persistent threat group known as Kimsuky.
Dec 29, 2023NewsroomEmail Security / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the agency between December 15 and 25,
Dec 29, 2023NewsroomCyber Attack / Web Security The Assembly of the Republic of Albania and telecom company One Albania have been targeted by cyber attacks, the country’s National Authority for Electronic Certification and Cyber Security (AKCESK) revealed this week. “These infrastructures, under the legislation in force, are not currently classified as critical or important information
I settle into the seat, check my controls, and lift off. The aircraft lifts off, not takes off. It’s like a helicopter at first, as the propellers start to spin. But unlike a chopper’s long floppy blades, these props look like an airplane’s but point straight up. Out of the windows, monitors show the Marina,
Tom Smothers, one-half of the famed Smothers Brothers comedy duo, who brought a revolutionary hit of music and political satire to late Sixties television, has died, The New York Times reports. He was 86. Smothers died at his home in Santa Rosa, California, following a “recent battle with cancer,” according to a spokesman for the
“Get woke, go broke,” a favorite rallying cry of conservative culture warriors, echoed far and wide in 2023 as one company after another was targeted for a boycott over supposed leftist tendencies. Raging right-wingers bashed cans of Bud Light, trashed displays at Target stores, and backed Florida Gov. Ron DeSantis in a feud with Disney.
Jodi Hildebrandt, podcast co-host and business partner of infamous mommy vlogger Ruby Franke, pleaded guilty Wednesday to four counts of felony aggravated child abuse, news station KUTV reports. Similar to Franke’s plea last week, two of Hildebrandt’s counts were dropped as part of a currently undisclosed plea deal. (Representatives for Hildebrandt were unable to be
Gypsy Rose Blanchard, the Missouri woman who pleaded guilty to second-degree murder in the death of her abusive mother, Claudine “Dee Dee” Blanchard, was released from prison Thursday, Dec. 28, ABC News reports. Blanchard was approved for early release on parole back in September, having served seven years of a 10-year sentence. She reportedly left
Gypsy Rose Blanchard, the abuse victim who spent seven years incarcerated for her role in the murder of her mother, Clauddine “Dee Dee” Blanchard, became a free woman on Thursday, leaving prison on parole. Her release comes three years early after she was sentenced to 10 years in prison for her second-degree murder conviction. During
The house where four University of Idaho students were killed last year is being demolished today, Dec. 28, The Associated Press reports. The former owner of the rental home in Moscow, Idaho — which has been boarded up and cordoned off by a security fence — donated it to the University of Idaho earlier this
Another woman has filed a lawsuit against a West Hollywood restaurant, alleging the establishment “intentionally created a dangerous and hostile environment” and allowed female patrons to be abused and sexually assaulted by former porn star Ron Jeremy. The plaintiff, who filed as anonymous Jane Doe 7105, alleges that Rockin’ Horse Inc., owners of the Sunset Strip
Elon Musk‘s X failed to block a California law that requires social media companies to disclose their content-moderation policies. U.S. District Judge William Shubb rejected the company’s request in an eight-age ruling on Thursday. “While the reporting requirement does appear to place a substantial compliance burden on social medial companies, it does not appear that
Whether you agree with his politics or not, the former president has good taste in country music. Barack Obama just released his 2023 list of his favorite songs of the year. And while there are quite a few from other genres that I don’t recognize (I’m pretty sure he just made “6LACK” up), there are
It’s time to get comfortable if you were lucky enough to come across this post today, because this is one of the greatest stories I think I’ve ever heard in my life. Luke Combs sat down with the boys of the Full Send Podcast last year, and the fellas talked everything from his rise in country