Apple warned users in 91 other countries about a possible “mercenary spyware attack”. Apple notified Reuters that the company found evidence of attackers attempting to remotely compromise iPhones. Mercenary spyware attacks are rare but much more sophisticated than regular cybercriminal activity or malware, as stated in the email. Apple also …
Read More »CISA Announces Malware Next-Gen Analysis
CISA has launched a new malware analysis system called Malware Next-Gen. It allows organizations to submit malware samples and suspicious artifacts for analysis, helping CISA to better support partners by automating analysis of new malware and improving cyber defense efforts. Network defenders need timely and useful information about malware, including …
Read More »
Here’s How
Phone turn off or battery dies, Google track you now
Google has launched an updated version of Find My Device, which helps people keep track of their numerous devices more easily. This new version also allows users to track their phones even when they are turned off or have run out of battery. Android users with devices other than phones …
Read More »Microsoft fixes two Windows zero-days exploited in attacks
Microsoft fixed two zero-day vulnerabilities in April 2024 Patch Tuesday, but they didn’t label them as such at first. CVE-2024-26234 is a vulnerability that involves a malicious driver being signed with a valid Microsoft Hardware Publisher Certificate. It was discovered by Sophos X-Ops in December 2023 and reported by team …
Read More »Fortinet Releases Security Updates for Multiple Products
Fortinet has released security updates for various products, including OS and FortiProxy, to fix vulnerabilities that could allow a cyber threat actor to take control of a system. CISA encourages users and administrators to take the following steps for enhanced security: FR-IR-23-345 FortiClientMac – Lack of configuration file validation: An …
Read More »Over 7.5 million “boAt” users personal information leaked
Data of over 7.5 million boAt customers is now on the dark web. This includes personal information like names, addresses, contact numbers, email IDs, and customer IDs. The attacker has released around 2GB of data on a forum. On April 5, a hacker named ShopifyGUY said they hacked the data …
Read More »Orbot: The Much-Needed Tor for Android and iOS!
What Is Orbot? Orbot is a free app created by the Guardian Project. It helps protect your privacy by routing your internet traffic through the Tor network, which encrypts your data and conceals your online activity, keeping your identity and location private. How Does Orbot Work? Here’s a breakdown of …
Read More »
Cisco Talos report
“CoralRaider” Targeting Financial Data Across Asia including Bangladesh
Vietnamese hackers are targeting businesses in Asia to get corporate credentials and financial data to sell online. Researchers at Cisco Talos found a group of hackers, known as CoralRaider, targeting India, China, South Korea, Bangladesh, Pakistan, Indonesia, and local entities with a specific type of malware. Talos believes that the …
Read More »Germany to launch cyber military branch
Germany is set to introduce a dedicated cyber branch in its military structure to counter the growing cyber threats. The German Cyber and Information Domain Service (CIR) will become the fourth independent branch of the country’s armed forces. “Like the army, air force and navy, it has responsibility for carrying …
Read More »New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
The HTTP/2 protocol has a vulnerability in the CONTINUATION frame that allows for denial-of-service (DoS) attacks. Security researcher Bartek Nowotarski named this technique HTTP/2 CONTINUATION Flood and reported it to the CERT Coordination Center (CERT/CC) on January 25, 2024. “Many HTTP/2 implementations do not properly limit or sanitize the amount …
Read More »