+84949482065
A US district judge in California sentenced Matthew Gatrel to two years in prison for operating distributed-denial-of-service (DDoS) attack for hire websites. The sites Gatrel ran launched more than 200,00…
The Cloud Security Alliance has published a report identifying the top cloud computing security risks faced by cybersecurity experts. Among things they noticed – a shift in cloud security responsibility…
Citrix has released updates to address a pair of flaws affecting Citrix Application Delivery Management (ADM). An improper access control vulnerability could be exploited to allow a remote, unauthenticated user…
A new Linux malware that can go undetected on infected machines is being used to target the financial sector in Latin America. Once the “Symbiote” malware infects the machine, it…
A WooCommerce credit card skimmer was found leveraging Telegram bot to pilfer the stolen data and later, sell it on the black market - resulting in fake transactions on victims’…
Operation First Light 2022 led by Interpol, with coordination from 76 countries, arrested 2,000 social engineering attackers and seized $50 million. It identified 3,000 suspects, raided 1,770 call centers, and…
A Proof-of-Concept (PoC) devised by Proofpoint researchers demonstrates that ransomware actors can abuse the document versioning settings in OneDrive and SharePoint Online services to encrypt files. More https://www.proofpoint.com/us/blog/cloud-security/proofpoint-discovers-potentially-dangerous-microsoft-office-365-functionality
Cloudflare reported another record-breaking HTTPS-based DDoS attack, which reached a peak of 26 million requests per second. The botnet comprised only 5,067 devices. Ref https://www.theregister.com/2022/06/14/cloudflare-record-ddos-attack/
A report from managed security operations center (SOC) provider Expel found a spike in business email compromise (BEC) attacks involving Microsoft Office 365 (O365) in the first quarter of 2022.…
Zscaler spotted a new malware loader, named PureCrypter, used to disseminate malware families such as Agent Tesla, Snake Keylogger, AsyncRAT, DCRat, and others. Ref https://thehackernews.com/2022/06/researchers-detail-purecrypter-loader.html
