BRATA Evolution from Malware to APT
Researchers have spotted the BRATA malware targeting a specific financial institution, its operators modified the attack chain customizing the malware to hit a specific target at a time, moving to…
Capital One Data breach -Former AWS Employee Convicted
A former AWS employee was convicted of multiple crimes connected to one of the largest US data breaches of all time. Paige Thompson, acting under the handle ‘erratic,’ would have…
CloudFlare One Zero Trust Features
Cloudflare introduced numerous capabilities for Cloudflare One, the company’s zero-trust secure access service edge platform. Cloudflare One include sophisticated email security protection, data loss prevention tools, CASB and private network discovery. This makes…
Malicious Information Stealing Play Store Apps
Researchers have spotted several apps on the Google Play Store with built-in adware and information-stealing malware. These apps are spyware tools capable of stealing information from other apps’ notifications, mainly…
QNAP Devices are under Ransomware Threat
Researchers are warning of a new wave of ech0raix ransomware attacks targeting QNAP Network Attached Storage (NAS) devices based on the sample file submissions on the ID ransomware platform. The…
DriftingCloud APT Exploits Sophos Vulnerability
A sophisticated Chinese APT caught exploiting a Sophos firewall zero-day to plant backdoors and launch MiTM attacks. The Sophos firewall vulnerability tracked as CVE-2022-1040 was patched in March this year…
Microsoft Office 365 Functionality Security weakness
Researchers have discovered a potentially dangerous functionality in Office 365 or Microsoft 365 that allows threat actors to strike with ransomware and to encrypt files stored on SharePoint and OneDrive…
RubyGems to enable MFA for its repositories
RubyGems enabled multi-factor authentication (MFA) for some of its largest publishers. The package manager has started alerting the maintainers of gems with more than 165 million downloads via the RubyGems…