Researchers Archives

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

December 24, 2024

by Ady DeeJay

Comments (0)

Dec 24, 2024Ravie LakshmananMalware / Data Exfiltration Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index (PyPI) repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named zebo and cometlogger,

October 29, 2024

by Ady DeeJay

Comments (0)

Oct 29, 2024Ravie LakshmananAI Security / Vulnerability A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML) models, some of which could lead to remote code execution and information theft. The flaws, identified in tools like ChuanhuChatGPT, Lunary, and LocalAI,

Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor

December 11, 2023

by Ady DeeJay

Comments (0)

Dec 11, 2023NewsroomThreat Intelligence / Cyber Attack Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that’s known to use a backdoor known as KEYPLUG. The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team

Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

November 8, 2023

by Ady DeeJay

Comments (0)

Nov 08, 2023NewsroomCloud Security / Cryptocurrency Cybersecurity researchers have developed what’s the first fully undetectable cloud-based cryptocurrency miner leveraging the Microsoft Azure Automation service without racking up any charges. Cybersecurity company SafeBreach said it discovered three different methods to run the miner, including one that can be executed on a

November 1, 2023

by Ady DeeJay

Comments (0)

A threat actor known as Prolific Puma has been maintaining a low profile and operating an underground link shortening service that’s offered to other threat actors for at least over the past four years. Prolific Puma creates “domain names with an RDGA [registered domain generation algorithm] and use these domains

October 12, 2023

by Ady DeeJay

Comments (0)

Oct 12, 2023NewsroomCyber Attack / Malware High-profile government and telecom entities in Asia have been targeted as part of an ongoing campaign since 2021 that’s designed to deploy basic backdoors and loaders for delivering next-stage malware. Cybersecurity company Check Point is tracking the activity under the name Stayin’ Alive. Targets

June 26, 2023

by Ady DeeJay

Comments (0)

Jun 26, 2023Ravie LakshmananCryptography / Cybersecurity In what’s an ingenious side-channel attack, a group of academics has found that it’s possible to recover secret keys from a device by analyzing video footage of its power LED. “Cryptographic computations performed by the CPU change the power consumption of the device which

June 20, 2023

by Ady DeeJay

Comments (0)

Jun 20, 2023Ravie LakshmananOperational Technology Three security vulnerabilities have been disclosed in operational technology (OT) products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors. “OT:ICEFALL demonstrates

June 19, 2023

by Ady DeeJay

Comments (0)

Jun 19, 2023Ravie LakshmananEndpoint Security / Hacking Cybersecurity researchers have uncovered a set of malicious artifacts that they say is part of a sophisticated toolkit targeting Apple macOS systems. “As of now, these samples are still largely undetected and very little information is available about any of them,” Bitdefender researchers

June 12, 2023

by Ady DeeJay

Comments (0)

Jun 12, 2023Ravie LakshmananVulnerability / Software Security researchers have warned about an “easily exploitable” flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. “A threat actor could impersonate a popular publisher and issue a malicious

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

Researchers Unmask Sandman APT’s Hidden Link to China-Based KEYPLUG Backdoor

Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

Researchers Expose Prolific Puma’s Underground Link Shortening Service

Researchers Uncover Ongoing Attacks Targeting Asian Governments and Telecom Giants

Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers

Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

Researchers Discover New Sophisticated Toolkit Targeting Apple macOS Systems

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags