î ‚Nov 05, 2024î „Ravie LakshmananMobile Security / Vulnerability Google has issued a warning about a security vulnerability in its Android operating system that is currently being actively exploited in the wild. The vulnerability, known as CVE-2024-43093, is a privilege escalation flaw …
Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System Read More »
A significant cybercriminal operation, known as EmeraldWhale, was recently exposed by researchers after more than 15,000 credentials were leaked into a stolen AWS S3 bucket as part of a large-scale Git repository theft campaign. This incident serves as a crucial …
EmeraldWhale’s Massive Git Breach Highlights Config Gaps Read More »
430 The Astaroth malware, a notorious banking trojan, has reappeared in recent campaigns, with a specific focus on targeting Brazilian users. The malware is known for running spear phishing attacks to infiltrate various corporate sectors in Brazil. Astaroth Banking Malware …
Astaroth Banking Malware Runs Actively Targets Users In Brazil Read More »
U.S. and Israeli cybersecurity agencies have jointly released a new advisory linking an Iranian cyber group to targeting the 2024 Summer Olympics and infiltrating a French commercial dynamic display provider to showcase messages condemning Israel’s participation in the event. The …
An unidentified threat actor has launched a phishing campaign targeting Facebook businesses and advertising account users in Taiwan. The campaign involves sending decoy emails with fake PDF filenames to lure victims into downloading and executing malware. The phishing emails impersonate …
Facebook Businesses Targeted in Infostealer Phishing Campaign Read More »
Google’s InkSight AI Transforms Handwritten Notes into Digital Text Google’s new technology, InkSight AI, is revolutionizing the way we digitize handwritten notes. This innovative tool preserves personal writing styles while enhancing efficiency in note-taking across various languages and complex documents. …
116 A critical vulnerability in Kubernetes Image Builder has recently been patched with the latest release. The vulnerability stemmed from hard-coded credentials that allowed unauthorized access to malicious actors. Kubernetes Image Builder Vulnerability As per the latest security advisory, the …
Hard-Coded Credentials Vulnerability In Kubernetes Image Builder Read More »
î ‚Oct 28, 2024î „Ravie LakshmananCloud Security / Cyber Attack A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset codenamed CloudScout. …
Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services Read More »
European Union regulators have fined LinkedIn a hefty €310 million ($335 million) for violating the General Data Protection Regulation (GDPR) data privacy rules. The fine was imposed by Ireland’s Data Protection Commission (DPC) on October 24. The DPC raised concerns …
LinkedIn Hit With $335M Fine for Data Privacy Violations Read More »
Federated Learning on the Rise Federated learning is gaining popularity as it addresses various security concerns that developers commonly face. This innovative approach allows multiple parties to collaborate on machine learning models without sharing sensitive data. By keeping data localized …
How (and why) federated learning enhances cybersecurity Read More »
