Security Affairs

FEBRUARY 24, 2025

“The analysis of SpyLend reveals a highly deceptive and dangerous threat targeting Android users. The malware exploits APIs to access files, contacts, call logs, SMS, and installed apps. ” concludes the report.

Access 292

Access Marketing Privacy IT 292

Security Affairs

JANUARY 16, 2025

” The analysis of the headers of the spam messages revealed a botnet of ~13,000 hijacked MikroTik devices, forming a network capable of executing large-scale malicious activities. The zip archive contains an obfuscated JavaScript file, which creates and executes a PowerShell script that connects to the C2 (62.133.60[.]137),

File names 347

File names Authentication Access Archiving 347

Collaboration 2.0

JANUARY 6, 2025

Enhanced Visual Search sends photos to Apple to help identify landmarks and other items. Here's why it has some users concerned and how to opt out.

IT 235

IT 235

Security Affairs

DECEMBER 18, 2024

” reads the analysis published by Kaspersky. . “The persistence method used by the threat actor was based on WorldClient allowing loading of extensions that handle custom HTTP requests from clients to the email server.”

Government 283

Government IT Access Information Security 283

Security Affairs

NOVEMBER 12, 2024

The feature makes it harder for police forensics analysis of the devices. It suggests taking inventory to check if any AFU devices have already rebooted. 404 Media now confirmed that Apple quietly introduced code into iOS 18.1 that reboots iPhones if it has not been unlocked for a period of time. ” reported 404 Media.

Encryption 315

Encryption Passwords Security Communications 315

Security Affairs

OCTOBER 29, 2024

Although the site claims to support macOS and iPhones, only Windows and Android payloads were available during the analysis. For Android users, a malicious APK installs a variant of the CRAXSRAT backdoor, sometimes bundled with SUNSPINNER.

Military 294

Military IT Security Information Security 294

Collaboration 2.0

OCTOBER 24, 2024

Have a question that requires a lot of text or numerical analysis? Consider running it by ChatGPT or another popular model -- the answer might surprise you.

IT 355

IT 355

Collaboration 2.0

DECEMBER 22, 2024

Our Part 2 analysis examines this sticky issue if a catastrophic outcome occurs. Who is liable: the product maker, the library coder, or the company that chose the product?

Libraries 353

Libraries 353

Security Affairs

JANUARY 31, 2025

The vulnerability was discovered by cybersecurity firm Horizon3, which published a technical analysis of the flaw. Updated VMSA to note that VMware has confirmed that exploit code for CVE-2023-34051 has been published. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,VMware)

Authentication 263

Authentication Cloud Cybersecurity Access 263

Security Affairs

FEBRUARY 24, 2025

The analysis of netflow data identified recurring attacker IPs, primarily hosted at SharkTech, with traffic over ports 12341, 12342, and 12348. The attackers used basic authentication methods. The attacks use “fasthttp” as the user agent, the researchers found online reports of similar password-spraying attacks.

Passwords 297

Passwords Authentication Access Cybersecurity 297

Security Affairs

MARCH 5, 2025

An analysis of the situation is ongoing. The agency revealed that it has disconnected its infrastructure to contain the attack and secure data, a circumstance that suggests it was the victim of a ransomware attack. “A cybersecurity incident has occurred at POLSA. The relevant services and institutions have been informed.

IT 254

IT Ransomware Cybersecurity Security 254

Security Affairs

MARCH 13, 2025

” reads a technical analysis of the two critical flaws. ” continues the analysis. In other words, it could be used for an account takeover attack.” ” GitLab Dedicated customers receive automatic updates, while self-managed users must apply updates manually. ” continues the advisory.

Authentication 166

Authentication Libraries Data breaches Security 166

Data Breach Today

JULY 26, 2024

New Analysis Reveals Growing Crisis for the National Vulnerability Database A growing backlog at the National Institute of Standards and Technology National Vulnerability Database could surge to above 30,000 unanalyzed security flaws by the end of the year if the agency fails to significantly ramp up its processing rates, according to a new analysis (..)

Security 297

Security IT 297

WIRED Threat Level

NOVEMBER 20, 2023

A WIRED analysis of leaked police documents verifies that a secretive government program is allowing federal, state, and local law enforcement to access phone records of Americans who are not suspected of a crime.

Access 363

Access Government Privacy Security 363

Security Affairs

MARCH 24, 2025

ABYSSWORKER employs functions with constant return values, using opaque predicates and derivation functions to obstruct static analysis. .” reads the report published by Elastic. The experts pointed out that only three such functions exist and are not used in predicates, the obfuscation is ineffective and easily identifiable.

Ransomware 213

Ransomware Security IT Access 213

eSecurity Planet

MARCH 24, 2025

Incident discovery and exploitation According to CloudSEKs analysis, the threat actor claimed to have breached the subdomain login.us2.oraclecloud.com The breach, exploiting a vulnerability in Oracles cloud infrastructure, now endangers over 140,000 tenants and has raised serious questions about cloud security practices.

Cloud 121

Cloud Risk Passwords Cybersecurity 121

Security Affairs

FEBRUARY 16, 2025

Mobile Indian Cyber Heist: FatBoyPanel And His Massive Data Breach Google Tag Manager Skimmer Steals Credit Card Info From Magento Site From South America to Southeast Asia: The Fragile Web of REF7707 Analyzing DEEP#DRIVE: North Korean Threat Actors Observed Exploiting Trusted Platforms for Targeted Attacks Chinese-Speaking Group Manipulates SEO with (..)

Security 162

Security Data breaches Encryption Ransomware 162

Security Affairs

JULY 19, 2024

The vulnerability arises from improper handling of email attachments when file analysis and content filters are enabled. “This vulnerability is due to improper handling of email attachments when file analysis and content filters are enabled. . ” reads the advisory published by Cisco. 055 and later.

Security 320

Security Passwords IT Information Security 320

Security Affairs

JANUARY 10, 2025

Evasion checks supported by the malicious code include detecting debuggers, verifying active processes, checking CPU core count, and scanning for malware analysis tools. The application serves as a downloader for XMRig, researchers noticed it supports evasion mechanisms. ” concludes the report.

Phishing 279

Phishing Mining Authentication Communications 279

Security Affairs

JANUARY 17, 2024

The analysis revealed that the infections left traces in the Shutdown.log, which is a text-based log file. ” reads the analysis published by Kaspersky. The analysis of the infections also revealed other similarities such as the path associated with malware execution (“/private/var/db/”).

Archiving 347

Archiving Cybersecurity IT Access 347

Security Affairs

JULY 14, 2024

. “Deobfuscated from test.txt and run from system memory, this final DarkGate binary is known for its complex mechanisms to avoid detection and malware analysis.” “One of the anti-analysis techniques employed by DarkGate is identifying the CPU of the targeted system. ” reads the report.

Phishing 329

Phishing Communications Access Cybersecurity 329

Security Affairs

JANUARY 20, 2025

” reads the analysis published by Socket. They take the attack further by programmatically draining the victims wallet, automatically transferring up to 98% of its contents to an attacker-controlled Solana address 3RbBjhVRi8qYoGB5NLiKEszq2ci559so4nPqv2iNjs8Q.” ” continues the report.

Libraries 252

Libraries Authentication IT Access 252

Security Affairs

APRIL 21, 2024

The threat actors behind the DuneQuixote campaign took steps to prevent collection and analysis the implants through the implementation of practical and well-designed evasion methods. ” reads the analysis published by Kaspersky.

Libraries 330

Libraries Communications IT Government 330

Security Affairs

DECEMBER 1, 2023

The popular cyber security researcher Patrick Wardle published a detailed analysis of the new macOS ransomware Turtle. concludes the analysis. The popular cybersecurity researcher Patrick Wardle dissected the new macOS ransomware Turtle used to target Apple devices. The binary also lacks of obfuscation.

Ransomware 350

Ransomware Encryption Archiving Cybersecurity 350

Security Affairs

JANUARY 15, 2025

“AWS CloudTrail logs only an HMAC of the encryption key, which is insufficient for recovery or forensic analysis.” . “Threat actor dubbedCodefingeruses compromised AWS keys to encrypt S3 bucket data via SSE-C, leveraging AWSs secure encryption infrastructure in a way that prevents recovery without their generated key.”

Encryption 289

Encryption Ransomware Authentication Cloud 289

Security Affairs

MAY 30, 2024

” reads the analysis published by ThreatFabric. Initial analysis revealed that the panel’s code had a critical mistake: it checked for authorization only after loading all scripts, briefly displaying the authenticated view to unauthorized users. However, their potential functionality is known based on panel analysis.”

Access 339

Access Authentication Communications IT 339

Security Affairs

SEPTEMBER 17, 2024

Leaked data includes sensitive information, including patients’ histology tests and clinical analysis results. We are not in a position to comment on or confirm the validity or accuracy of analysis carried out by other parties, nor can we verify whether the data examined by these parties is in fact related to this incident.”

Ransomware 331

Ransomware IT Security Data breaches 331

Security Affairs

JUNE 17, 2024

” reads the analysis published by Sygnia. Both F5 appliances were running an outdated, vulnerable, operating system. The threat actor may have leveraged one of the vulnerabilities to gain remote access to the appliances.” The PlugX RAT was used by multiple Chinese APT groups in cyberespionage campaigns over the years.

Access 340

Access Security IT Information Security 340

Schneier on Security

FEBRUARY 4, 2025

Interesting analysis : We analyzed every instance of AI use in elections collected by the WIRED AI Elections Project ( source for our analysis), which tracked known uses of AI for creating political content during elections taking place in 2024 worldwide. This tracks with my analysis. People share as a form of social signaling.

IT 94

IT 94

Collaboration 2.0

DECEMBER 21, 2024

The answer is complicated, so in Part I of a two-article analysis, we consulted legal experts to obtain some definitive answers.

IT 274

IT 274