Code-Poisoning ML
A group of researchers discovered a new type of code-poisoning attack that can manipulate natural-language modeling systems via a backdoor. The attack could target email accounts and algorithmic trading, and…
STARTTLS … Started… Flawed
Security researchers have disclosed as many as 40 different vulnerabilities associated with an opportunistic encryption mechanism in mail clients and servers that could open the door to targeted man-in-the-middle (MitM)…
Adload Targets macOS Evades Detection
A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 dubbed "AdLoad," as the malware, is…
Zero Trust : Authorities Call
President Biden’s executive order on improving the nation’s cybersecurity requires agency heads to develop a plan to implement a zero-trust architecture to effectively mitigate cyber risk. Increasing and enhancing an…
T-Mobile Breach
T-Mobile USA Inc. has launched an investigation into a hacker advertising allegedly stolen customer records on a popular hacking forum. The hacker, who goes by the name of “Subvirt,” made…
Ech0raix targets Qnap & Synology
The eCh0raix ransomware is now updated to target two vendors’ devices that are mostly used in Single Office and Home Office (SOHO) setups. Earlier, the ransomware was used to target…
Posted inAzure Security
Azure Credentials exposed in PlainText
Mimikatz has been used by a vulnerability researcher to dump a user's unencrypted plaintext Microsoft Azure credentials from Microsoft's new Windows 365 Cloud PC service.Mimikatz, an open-source software that allows…
Cisco Acquires Epsagon
Cisco Systems is buying Israeli application monitoring company Epsagon to add to its growing observability platform added to Cisco’s full-stack observability platform that today consists of the company’s other acquired…