CyberManipal.

BREACHES

WIFI probing exposes user's personal data

2 years ago

University of Hamburg, Germany: Researchers conducted a field experiment capturing thousands of passersby's WiFi connection probe requests to determine the type of data transmitted without the device owners realizing it. Many firms track their customers' position and movement. This tracking only uses anonymized MAC addresses, often regarded as GDPR... Read more

University of Hamburg, Germany: Researchers conducted a field experiment capturing thousands of passersby's WiFi connection... Read more

VULNERABILITIES

XD - not so funny

2 years ago

Reports have been coming up related to the activity of the Hello XD ransomware, where an updated sample with more robust encryption has been deployed. From the first appearance of Hello XD in November 2021, it was based on the leaked source code of Babuk and used for double-extortion... Read more

Reports have been coming up related to the activity of the Hello XD ransomware, where... Read more

BREACHES

GitHub reveals that 100K npm user accounts compromised

2 years ago

Github discloses login details of roughly 100,000 npm accounts by mid-April, data was breached with stolen OAuth apps token issued to Heroku and Travis-CI. Threats were escalated with a compromised AWS access key, after downloading multiple private npm repositories using the stolen OAuth user tokens. GitHub, Travis CI, and Heroku... Read more

Github discloses login details of roughly 100,000 npm accounts by mid-April, data was breached with... Read more

VULNERABILITIES

MALVERTISER- advertising malware

2 years ago

After a relatively stable presence since the start of this year, the ChromeLoader malware is seeing a rise in detection, posing a widespread threat. The malware can alter a user's web browser history and promote unwanted content from which the attacker stands to receive financial gain by redirecting user traffic... Read more

After a relatively stable presence since the start of this year, the ChromeLoader malware is... Read more

POLICIES AND REGULATIONS

Anonymous announces cyber-war against Russian Killnet

2 years ago

Anonymous, an activist group has announced a cyber-war against the pro-Russian group Killnet which attacked European institutions. Anonymous declared a “cyberwar” against Putin’s government after its Ukrainian invasion. It includes leaking over 360,000 Russian federal agency files in the process. On Twitter, the @YourAnonOne account announced the cyber war against... Read more

Anonymous, an activist group has announced a cyber-war against the pro-Russian group Killnet which attacked... Read more

RESEARCH AND DEVELOPMENT

Google WAF bypassed by oversized POST requests

2 years ago

WAF is a web application firewall that provides web application security from malicious attacks such as SQL injection, DDOS, etc. But recently, Google’s WAF was bypassed using POST requests. This has been reported by the researchers at Kloudle (a security consultancy firm) woho were able to bypass Google Cloud Platform... Read more

WAF is a web application firewall that provides web application security from malicious attacks such... Read more

VULNERABILITIES

25 Malicious JavaScript Libraries Distributed via NPM Package Repository

2 years ago

DevOps security firm JFrog informed that it found and helped remove 25 malicious JavaScript libraries from the official npm package repository. This is the second time in three months that JFrog found malicious npm packages designed to steal Discord tokens and environment variables after reporting 17 similar packages in December... Read more

DevOps security firm JFrog informed that it found and helped remove 25 malicious JavaScript libraries... Read more

VULNERABILITIES

US Banks prepare for potential attack as Russian cybercriminals become emboldened

2 years ago

The Russia-Ukraine standoff in the physical world has also spilled into the cyber realm. Politicians and cybersecurity experts warn of potential attacks against the U.S. financial industry. Many conventional security rules are changing, according to Victor Wieczorek, a nation-state red teamer and director of threat and attack simulation at cybersecurity... Read more

The Russia-Ukraine standoff in the physical world has also spilled into the cyber realm. Politicians... Read more

BREACHES

Microsoft Exchange Server vulnerabilities exploited for financial fraud

2 years ago

The combination of Squirrelwaffle, ProxyLogon, and ProxyShell against Microsoft Exchange Servers is being used to conduct financial fraud through email hijacking. On Tuesday, researchers from Sophos revealed a recent incident in which a Microsoft Exchange Server, which had not been patched to protect it against a set of critical vulnerabilities... Read more

The combination of Squirrelwaffle, ProxyLogon, and ProxyShell against Microsoft Exchange Servers is being used to... Read more

BREACHES

Cyberattacks Knock Out Sites of Ukrainian Army, Major Banks

2 years ago

Several websites of Ukraine's government and military were offline on Tuesday following a series of attacks that targeted the country's banks and military.A Ukrainian cyber defense official said there was no sign of other disruptive actions that the attackers could have carried out. And emergency teams are working to recover... Read more

Several websites of Ukraine's government and military were offline on Tuesday following a series of... Read more