Technology

Operators associated with the Lazarus sub-group BlueNoroff have been linked to a series of cyberattacks targeting small and medium-sized companies worldwide with an aim to drain their cryptocurrency funds, in what’s yet another financially motivated operation mounted by the prolific North Korean state-sponsored actor. Russian cybersecurity company Kaspersky, which is tracking the intrusions under the
0 Comments
Mozilla has released the latest version of its Web browser, Firefox 96, with multiple new features and fixes. The Firefox 96 version is available for desktop and Android now. In order to upgrade audio and video calls, Mozilla has worked on noise suppression and auto-gain-control in the latest update. The company has also added improvements
0 Comments
An Iranian state-sponsored actor has been observed scanning and attempting to abuse the Log4Shell flaw in publicly-exposed Java applications to deploy a hitherto undocumented PowerShell-based modular backdoor dubbed “CharmPower” for follow-on post-exploitation. “The actor’s attack setup was obviously rushed, as they used the basic open-source tool for the exploitation and based their operations on previous
0 Comments
Threat actors are actively incorporating public cloud services from Amazon and Microsoft into their malicious campaigns to deliver commodity remote access trojans (RATs) such as Nanocore, Netwire, and AsyncRAT to siphon sensitive information from compromised systems. The spear-phishing attacks, which commenced in October 2021, have primarily targeted entities located in the U.S., Canada, Italy, and
0 Comments
A new cross-platform backdoor called “SysJoker” has been observed targeting machines running Windows, Linux, and macOS operating systems as part of an ongoing espionage campaign that’s believed to have been initiated during the second half of 2021. “SysJoker masquerades as a system update and generates its [command-and-control server] by decoding a string retrieved from a
0 Comments
Tecno Pop 5 LTE was launched in India on Wednesday as the latest addition to the company’s Pop Series. The smartphone packs a 5,000mAh battery, and comes with 14 regional language support, Tecno says. The phone was launched in November in the Philippines and Pakistan in November last year with a 6.52-inch display. The Tecno
0 Comments
With the last month of 2021 dominated by the log4J vulnerabilities discovery, publication, and patches popping up in rapid succession, odds are you have patched your system against Log4J exploitation attempts. At least some systems, if not all. You might even have installed the latest patch – at the time of writing, that is 2.17.1,
0 Comments
Honor Magic V foldable smartphone has been launched in China. The feature-loaded handset becomes the first foldable phone to come with Qualcomm’s flagship Snapdragon 8 Gen 1 SoC. It also comes with a separate security chip, a triple rear camera setup, two hole-punch front cameras (one on the outside and one on the inside), and
0 Comments
A study of 16 different Uniform Resource Locator (URL) parsing libraries has unearthed inconsistencies and confusions that could be exploited to bypass validations and open the door to a wide range of attack vectors. In a deep-dive analysis jointly conducted by cybersecurity firms Claroty and Synk, eight security vulnerabilities were identified in as many third-party
0 Comments
Threat hunters have shed light on the tactics, techniques, and procedures embraced by an Indian-origin hacking group called Patchwork as part of a renewed campaign that commenced in late November 2021, targeting Pakistani government entities and individuals with a research focus on molecular medicine and biological science. “Ironically, all the information we gathered was possible
0 Comments