UNC4191 Relies on USB in New Campaign
Mandiant experts shared their findings about the new campaigns, attributing them to a China-based threat actor called UNC4191, that relies on USB devices as an initial infection vector This campaign…
LastPass sufferes a data breach again
LastPass suffered in a data breach in August that enabled a hacker to infiltrate the company again and steal customer information. LastPass announced yesterday that it was investigating the breach,…
Red Hat Quarkas ZeroDay Vulnerability
A zero-day vulnerability has been discovered in the Red Hat build of Quarkus, a full-stack, Kubernetes-native Java framework optimized for Java virtual machines and native compilation. Tracked CVE-2022-4116, the flaw…
Microsoft Adds Enhancements to Defender
Microsoft has added new features to Microsoft Defender. The new features will protect devices from advanced attacks and emerging threats. Security by Default Built-in protection is a set of default…
Oracle Fusion Vulnerability Exploited in Wild
The US CISA warned organizations that a critical Oracle Fusion Middleware vulnerability patched in early 2022 is being exploited in attacks. The vulnerability tracked as CVE-2021-35587 impacts Oracle Access Manager,…
Meta fined again by Irish Data Protection Regulators
The Irish subsidiary of Facebook owner Meta Platforms has been fined €265 million today by Ireland’s Data Protection Commission for breaching the EU GDPR. The commission launched an investigation in…
Vice Society Leaks IKEA Morocco & Kuwait ! Washington County sites down on Thanksgiving Holiday
Vice Society has supposedly posted data stolen from IKEA stores in Morocco and Kuwait. Snippets from the ransomware gang’s leak site suggest threat actors got a hold of confidential business…
Twitter Breach Brings API weakness in to limelight
Cybercriminals began selling the user data of more than 5.4 million Twitter users on a hacking forum after exploiting an API vulnerability disclosed in December 2021. Recently, a hacker released…