Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, Southeast Asia, Europe, and the Middle East. According to findings from a group of researchers from the Citizen Lab, the spyware campaign was directed against journalists, political opposition figures, and
Technology
For a smartphone company that has been focused on the budget and mid-range segment since its inception, it was a big surprise when Tecno went all-in and unveiled its first folding smartphone during MWC 2023. Dubbed the Phantom V Fold 5G, this horizontal folding smartphone is a direct competitor to Samsung’s Galaxy Z Fold series, and
Apr 12, 2023Ravie LakshmananPatch Tuesday / Software Updates It’s the second Tuesday of the month, and Microsoft has released another set of security updates to fix a total of 97 flaws impacting its software, one of which has been actively exploited in ransomware attacks in the wild. Seven of the 97 bugs are rated Critical
Tecno Phantom V Fold has been launched in India. The phone was unveiled at the Mobile World Congress 2023 event in Barcelona earlier this year. The handset, previously reported to have been manufactured at a Noida facility, is the first foldable smartphone in the country to be powered by MediaTek’s flagship Dimensity 9000+ SoC. The
Apr 11, 2023Ravie LakshmananCloud Security / Data Security A “by-design flaw” uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code. “It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions to steal access-tokens of higher
Samsung is expected to launch the flagship Galaxy Tab S9 series with Galaxy Tab S9, Galaxy Tab S9+, and Galaxy Tab S9 Ultra models later this year. As per a new leak, the South Korean company might be working on a Galaxy Z Tab with a foldable screen. The new foldable tablet could be launched alongside
Apr 11, 2023Ravie LakshmananSoftware Security / Cryptocurrency Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell
Xiaomi 13T series is tipped to launch soon. The company is expected to launch its new premium T-series smartphones in the third quarter of 2023. Xiaomi has not officially confirmed any details about the launch of the 13T series. However, the Xiaomi 13T Pro, which will be the more premium offering over the vanilla model,
Apr 10, 2023Ravie LakshmananHacking Tool / Cyber Threat An Estonian national has been charged in the U.S. for purchasing U.S.-made electronics on behalf of the Russian government and military. The 45-year-old individual, Andrey Shevlyakov, was arrested on March 28, 2023, in Tallinn. He has been indicted with 18 counts of conspiracy and other charges. If
Lava Blaze 2 has been launched in India priced under Rs. 10,000. The Lava Blaze 2 will be available for sale from April 18 onwards. The phone comes with a 5,000mAh battery with 18W fast charging support. The handset sports a 6.5-inch IPS LCD display with a 90Hz refresh rate. It is available in three
Apr 10, 2023Ravie LakshmananWeb Security / Malware Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy’s Sucuri, “leverages all known and recently discovered theme and plugin vulnerabilities” to breach WordPress sites. The attacks are known to
OnePlus Nord CE 3 Lite 5G launched this week in India as the most affordable Nord-branded handset from the brand. The new handset has a Snapdragon 695 SoC under the hood and succeeds the OnePlus Nord CE 2 Lite 5G that debuted last year. The OnePlus Nord CE 3 Lite 5G will be competing with
Apr 08, 2023Ravie LakshmananVulnerability / Software The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be abused to break out of security boundaries and execute arbitrary shellcode. The flaw, which affects all versions, including and prior to 3.9.14, was reported by researchers from South Korea-based
Infinix Note 30 live images seem to have been leaked on the Web. The leaked images show the design of the upcoming Infinix smartphone, along with its key specifications. The Infinix Note 30 is shown to have a centrally-aligned hole-punch cutout on the display. It is tipped to be powered by a MediaTek Helio G99
Apr 08, 2023Ravie LakshmananZero-Day / Endpoint Security Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows – CVE-2023-28205 – A use after free issue in WebKit that could lead to
Vivo T2 5G is all set to launch in India on April 11 and the brand is actively teasing the design of the smartphone via Flipkart. Now, ahead of its official unveiling, a Vivo handset, thought to be the Vivo T2 5G, has appeared on the Geekbench benchmarking site. The listing suggests a Snapdragon 695
Apr 08, 2023Ravie LakshmananMalware / Cyber Attack Taiwanese PC company MSI (short for Micro-Star International) officially confirmed it was the victim of a cyber attack on its systems. The company said it “promptly” initiated incident response and recovery measures after detecting “network anomalies.” It also said it alerted law enforcement agencies of the matter. That
Asus ROG Phone 7 is all set to go official in India on April 13. Ahead of the official debut, the upcoming ROG series smartphone is said to have received certification from Thailand’s National Broadcasting and Telecommunications Commission (NBTC). While the listing does not hint at any key specifications of the phone, it does indicate
Apr 08, 2023Ravie LakshmananCyber War / Cyber Threat The Iranian nation-state group known as MuddyWater has been observed carrying out destructive attacks on hybrid environments under the guise of a ransomware operation. That’s according to new findings from the Microsoft Threat Intelligence team, which discovered the threat actor targeting both on-premises and cloud infrastructures in
Vivo X90 series has been recently tipped to launch in India by April end. The smartphones in the Vivo X90 lineup — which include the Vivo X90 and the Vivo X90 Pro— have already launched in China last year in November. While the company is yet to share anything about the detailed specifications of the phones,