The “COOL” in COLDRIVER: A Siberian Update on Cyber Threat The threat actor COLDRIVER, identified as having links to Russia, continues to engage in activities related to credential theft. COLDRIVER is simultaneously working to improve its tech to elude detection. The group is tracked by Microsoft’s Threat Intelligence team under their internal name, Star Blizzard.
Read More
*Bleep Blooop*: Critical Bluetooth Security Flaw Identified Main Points: A severe Bluetooth security flaw stands vulnerable to exploitation, potentially allowing threat actors control over Android, Linux, macOS and iOS devices. The identified issue is being tracked as CVE-2023-45866, an authentication bypass loophole that could be leveraged by malicious entities to seize control of susceptible devices.
Read More
Humans: The Puzzling (and Often Insecure) Element in Cybersecurity Let’s start with a bulleted rundown of the key points to talk about: – Humans are notably complex entities with consciousness, emotions, and the capacity to reason and act. – In the cybersecurity landscape, humans have perennially emerged as primary targets for cyber assailants. – Cyber
Read More
Government Demands Push Notification Records: A Sneak-Peak Into the Mobile Connection Government Agencies Looking For Data From Digital Post Office – A number of governments, whose names have not been disclosed, are reportedly asking for mobile push notification records from tech giants Apple and Google. – Push notifications can be understood as alerts that smartphone
Read More
Breakdown of Threat Intelligence: A Lighthearted Digest What Threat Intelligence Entails Threat intelligence is like the “tech Sherlock Holmes” that’s more into deciphering codes than solving conventional mysteries. It involves topnotch spying on cyber threats, then processing and analyzing them. But it doesn’t stop there – it’s also invested in developing proactive measures to beef
Read More
An Evildoer Lurks in the Shadows: Unmasking Krasue • A new Linux remote access trojan, named Krasue, targets telecom companies in Thailand. • Krasue has been active since 2021, securing covert access to victims’ networks. • Group-IB reveals Krasue’s uncanny ability to hide its presence during initialization. BEWARE: Krasue on the Loose Stealth and deception
Read More
# Meta Ramps Up Encryption on Messenger Main Points: – Meta has started incorporating end-to-end encryption (E2EE) across Messenger for personal calls and individual personal messages as a default setting. – This isn’t your average run-of-the-mill security update; the entire app was reconstructed from scratch, under the close supervision of privacy and cybersecurity gurus. –
Read More
Main points: Threat actors can exploit Amazon Web Services Security Token Service (AWS STS) to infiltrate cloud accounts and conduct auxiliary attacks. Red Canary researchers highlight the capabilities of these threat actors in impersonating user identities and roles in cloud environments. AWS STS is a web service that grants applications or users temporary access-based security
Read More
Security Flaws Unearthed in Sierra Wireless AirLink Routers Main Points: A total of 21 security vulnerabilities have been found in Sierra Wireless AirLink cellular routers. Open-source components such as TinyXML and OpenNDS are also affected. These vulnerabilities have been termed collectively as Sierra:21. Over 86,000 devices across critical sectors are at risk from these cyber
Read More
Browser Extension Compromise: A Laughing Matter? • The browser is an increasingly attractive target for cyber fiends. • Browser extensions often turn malicious due to missteps by developers or external attacks. • A series of recent incidents prove the gravity of the situation. A Browser Under Siege: The New Cyber Battlefield? The browser, just like
Read MoreNo products in the cart.