CyberSecurity Blog

Canada bans WeChat and Kaspersky apps on government-issued mobile devices

Canada bans WeChat and Kaspersky apps on government-issued mobile devices Pierluigi Paganini October 31, 2023 Canada banned the Chinese messaging app WeChat and Kaspersky antivirus on government mobile devices due to privacy and security risks. The Government of Canada announced a ban on the use of the WeChat and Kaspersky applications on government-issued mobile devices…
Read more

Lazarus Group Looking for Unpatched Software Vulnerabilities

ICYMI: North Korean Hackers Repeatedly Target Known Flaws in Legitimate Software North Korea’s state-sponsored hackers are spreading malware through known vulnerabilities in legitimate software. In a new campaign spotted by Kaspersky researchers, the Lazarus group is targeting a version of an unnamed software product with vulnerabilities reported and patches available.http://dlvr.it/Sy9LTv

MI5 chief warns of Chinese cyber espionage reached an unprecedented scale

ICYMI: MI5 chief warns of Chinese cyber espionage reached an unprecedented scale Pierluigi Paganini October 22, 2023 MI5 chief warns Chinese cyber espionage reached an epic scale, more than 20,000 people in the UK have now been targeted. The head of MI5, Ken McCallum, warns that Chinese spies targeted more than 20,000 people in the…
Read more

Protecting Business-Critical Web Applications: 4 Challenges

How to Protect Dispersed Apps, APIs and Handle Low Visibility, Emerging Threats In recent years, the adoption of public cloud infrastructures has surged, providing organizations with unparalleled flexibility and scalability. But this shift has also introduced a new set of challenges when it comes to protecting web applications and APIs that are hosted on these…
Read more

Security Affairs newsletter Round 442 by Pierluigi Paganini – INTERNATIONAL EDITION

ICYMI: Security Affairs newsletter Round 442 by Pierluigi Paganini – INTERNATIONAL EDITION  |  A threat actor is selling access to Facebook and Instagram’s Police Portal  |  Threat actors breached Okta support system and stole customers’ data  |  US DoJ seized domains used by North Korean IT workers to defraud businesses worldwide  |  Alleged developer of…
Read more

Lazarus Group Looking for Unpatched Software Vulnerabilities

North Korean Hackers Repeatedly Target Known Flaws in Legitimate SoftwareNorth Korean hackers are spreading malware through known vulnerabilities in legitimate software. In a new campaign spotted by Kaspersky researchers, the Lazarus group is targeting a version of an unnamed software product with vulnerabilities reported and patches available. The post Lazarus Group Looking for Unpatched Software…
Read more

Lazarus Group Looking for Unpatched Software Vulnerabilities

North Korean Hackers Repeatedly Target Known Flaws in Legitimate Software North Korea’s state-sponsored hackers are spreading malware through known vulnerabilities in legitimate software. In a new campaign spotted by Kaspersky researchers, the Lazarus group is targeting a version of an unnamed software product with vulnerabilities reported and patches available.http://dlvr.it/Sy6sZ1

A threat actor is selling access to Facebook and Instagram’s Police Portal

ICYMI: A threat actor is selling access to Facebook and Instagram’s Police Portal Pierluigi Paganini October 21, 2023 A threat actor is selling access to Facebook and Instagram’s Police Portal used by law enforcement agencies to request data relating to users under investigation. Cyber security researcher Alon Gal, co-founder & CTO of Hudson Rock, first…
Read more

IT Army of Ukraine disrupted internet providers in territories occupied by Russia

IT Army of Ukraine disrupted internet providers in territories occupied by Russia Pierluigi Paganini October 29, 2023 IT Army of Ukraine hacktivists have temporarily disrupted internet services in some of the territories that have been occupied by Russia. Ukrainian hacktivists belonging to the IT Army of Ukraine group have temporarily disabled internet services in some of…
Read more

Security Affairs newsletter Round 443 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 443 by Pierluigi Paganini – INTERNATIONAL EDITION  |  Bug hunters earned $1,038,250 for 58 unique 0-days at Pwn2Own Toronto 2023  |  Lockbit ransomware gang claims to have stolen data from Boeing  |  How to Collect Market Intelligence with Residential Proxies?  |  F5 urges to address a critical flaw in BIG-IP  | …
Read more