10 Jan Lorenz ransomware gang plants backdoors to use months later Security researchers are warning that patching critical vulnerabilities allowing access to the network is insufficient to defend against ransomware attacks. […]
09 Jan Microsoft: Kubernetes clusters hacked in malware campaign via PostgreSQL The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL containers. […]
09 Jan Darknet drug markets move to custom Android apps for increased privacy Online markets selling drugs and other illegal substances on the dark web have started to use custom Android apps for increased privacy and to evade law enforcement. […]
09 Jan GitHub makes it easier to scan your code for vulnerabilities GitHub introduced a new option to set up code scanning for a repository known as “default setup,” designed to help developers configure it automatically with just a few clicks. […]
09 Jan Auth0 fixes RCE flaw in JsonWebToken library used by 22,000 projects Auth0 fixed a remote code execution vulnerability in the immensely popular ‘JsonWebToken’ open-source library used by over 22,000 projects and downloaded over 36 million times per month on NPM. […]
09 Jan Fake OnlyFans dating sites abuse UK Environment Agency open redirect Threat actors abused an open redirect on the official website of the United Kingdom’s Department for Environment, Food & Rural Affairs (DEFRA) to direct visitors to fake OnlyFans adult dating sites. […]
08 Jan Hackers push fake Pokemon NFT game to take over Windows devices Threat actors are using a well-crafted Pokemon NFT card game website to distribute the NetSupport remote access tool and take control over victims’ devices. […]
07 Jan Malicious PyPi packages create CloudFlare Tunnels to bypass firewalls Six malicious packages on PyPI, the Python Package Index, were found installing information-stealing and RAT (remote access trojan) malware while using Cloudflare Tunnel to bypass firewall restrictions for remote access. […]
06 Jan The Week in Ransomware – January 6th 2023 – Targeting Healthcare This week saw a lot of ransomware news, ranging from new extortion tactics, to a ransomware gang giving away a free decryptor after attacking a children’s hospital. […]
06 Jan Chick-fil-A investigates reports of hacked customer accounts American fast-food restaurant chain Chick-fil-A is investigating what it described as “suspicious activity” linked to some of its customers’ accounts. […]