New connections between PrivateLoader, a popular pay-per-click (PPI) malware firm, and ruzki Pay-Per-Install Services provider. They have been discovered by cybersecurity researchers. According to SEKOIA, “the threat actor ruzki (aka les0k, zhigalsz) advertises their PPI service on unofficial Russian-language message…
Solution for password management Last month, LastPass development systems revealed additional information regarding the security breach. That includes the fact that the threat actor had access to its servers for four days in August 2022. CEO of LastPass Karim Toubba…
In order to further propagate its malicious package, a new malware packs exploits the YouTube channels of its victims. They lure to produce malicious video tutorials promoting phoney cheats and cracks for well-known video games. In YouTube videos aimed toward…
RCE (Remote Code Execution) and unknown backdoor threats are discovered by researchers. A researcher issues a warning on many flaws in the WAPPLES web application firewall (WAF) that made it possible to seize control of susceptible devices and issue arbitrary…
Ride-hailing giant Uber disclosed Thursday it is responding to a cybersecurity incident involving a Uber potential breach of its network. Also said that it is in touch with law enforcement authorities. The New York Times first reported the incident. The…
A now-patched significant security hole in Mitel MiVoice Connect has been used by the Lornenz ransomware operations. The operators used it to gain access to target environments for subsequent destructive actions. Researchers from cybersecurity company Arctic Wolf stated in a…
The Internet of Gas Station Tank Gauges: The author of Metasploit, HD Moore, revealed more than 5,800 publicly accessible Automated Tank Gauges (ATGs) at gas stations in a 2015 post. These systems are essential for measuring fluid levels, tank temperature,…
In wireless LAN equipment that is supposedly used to provide internet connectivity in flights, two serious aircraft wifi devices vulnerabilities were discovered. The Flexlan Forex3000 and Forex2000 series wi-fi LAN equipment made by Contec was affected by the weaknesses discovered…
Organizations must use authentication as a foundational security measure. If they want to know who and what is using their resources and assets. Strong Authentication in Digital, according to the Cybersecurity and Infrastructure Security Agency (CISA), is the process of…
A group of threat actors formerly linked to the ShadowPad remote obtains Trojan (RAT) have switched to a new toolkit. They use the new toolkit to conduct operations against various governments and state-owned companies across many Asian countries. The Threat…
