The notorious North Korean state-backed hacking group Lazarus uploaded four packages to the Python Package Index (PyPI) repository with the goal of infecting developer systems with malware. The packages, now… Read More »Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems
A previously undocumented threat actor dubbed SPIKEDWINE has been observed targeting officials in European countries with Indian diplomatic missions using a new backdoor called WINELOADER. The adversary, according to a report from Zscaler ThreatLabz,… Read More »New Backdoor Targeting European Officials Linked to Indian Diplomatic Events
U.S. President Joe Biden has issued an Executive Order that prohibits the mass transfer of citizens’ personal data to countries of concern. The Executive Order also “provides safeguards around other activities that… Read More »President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations
At least two different suspected China-linked cyber espionage clusters, tracked as UNC5325 and UNC3886, have been attributed to the exploitation of security flaws in Ivanti Connect Secure VPN appliances. UNC5325 abused CVE-2024-21893 to deliver a… Read More »Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware
An Iran-nexus threat actor known as UNC1549 has been attributed with medium confidence to a new set of attacks targeting aerospace, aviation, and defense industries in the Middle East, including Israel and… Read More »Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors
Traditional perimeter-based security has become costly and ineffective. As a result, communications security between people, systems, and networks is more important than blocking access with firewalls. On top of that, most… Read More »Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management
In today’s digital era, data privacy isn’t just a concern; it’s a consumer demand. Businesses are grappling with the dual challenge of leveraging customer data for personalized experiences while navigating… Read More »Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data
The U.S. government is warning about the resurgence of BlackCat (aka ALPHV) ransomware attacks targeting the healthcare sector as recently as this month. “Since mid-December 2023, of the nearly 70… Read More »FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks
Mexican users have been targeted with tax-themed phishing lures at least since November 2023 to distribute a previously undocumented Windows malware called TimbreStealer. Cisco Talos, which discovered the activity, described the authors as… Read More »TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users
In a new joint advisory, cybersecurity and intelligence agencies from the U.S. and other countries are urging users of Ubiquiti EdgeRouter to take protective measures, weeks after a botnet comprising… Read More »Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28’s MooBot Threat