cloudsecurity – Page 5 – TheCyberThrone

Accellion Attack Reverse Engineered

Accellion FTA mess : Attackers will devote substantial resources to reverse engineering hardware, software or a service if they see a financial upside. In Accellion's FTA, reverse engineering enabled attackers to…

PravinKarthik March 3, 2021

Azure Security cloudsecurity

Decentralised identity

Decentralized identity also known as self-sovereign identity is earning a reputation as a silver bullet that can solve all of today’s identity problems. It ensures perfect privacy, informed consent, user…

PravinKarthik March 2, 2021

cloudsecurity

NSA Recommend Zero Trust Architecture

The National Security Agency issued instructions for defense agencies and contractors on how to set up a zero-trust network architecture. The push to zero trust where compromise is assumed and…

PravinKarthik February 27, 2021

cloudsecurity cybersecurity Data Breaches

Threat Needle Malware

A prolific North Korean state-sponsored hacking group aka Lazarus has been tied to a new ongoing espionage campaign aimed at exfiltrating sensitive information from organizations in the defense industry leveraging…

PravinKarthik February 26, 2021

cloudsecurity

Chinese Hackers FriarFox’ed Firefox

Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems using Gmail accounts Chinese APT tracks…

PravinKarthik February 25, 2021

cloudsecurity

Cloud apps Increasingly abused with Malware download

New research shows that the majority of all malware is now delivered via cloud applications, showing how attackers increasingly abuse popular cloud services to evade legacy security defenses, putting enterprise…

PravinKarthik February 25, 2021

cloudsecurity MobileApps

Telegram Credentials Harvest

A recently discovered phishing campaign attempted to steal victims' credentials by abusing the Telegram messaging app's API to create malicious domains that help bypass security tools such as secure email…

PravinKarthik February 23, 2021

cloudsecurity MobileApps

iOS Shady Sites

A cybercrime group specialized in showing malicious ads has abused an unpatched zero-day vulnerability in WebKit-based browsers to break security restrictions and redirect users from legitimate portals to shady sites…

PravinKarthik February 17, 2021