Overview. Pulse Connect Secure (PCS) gateway contains a vulnerability that can allow an unauthenticated remote attacker to execute arbitrary code. Description. CVE-2021-22893. An unspecified vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse….
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Fraud Risk Management Group Used Fresh Tactic to Target South Korea Doug Olenick (DougOlenick) • April 21, 2021 The form Lazarus uses to lure in its victims (Source: Malwarebytes) Malwarebytes researchers report the North Korean advanced persistent threat group Lazarus rolled out a…
Geico has filed a data breach notice with the California attorney general’s office, admitting that fraudsters had stolen customers’ driver’s license numbers from its website. In the notice, discovered by TechCrunch, the American auto insurance titan said that from January 21st to March 1st this year, bad actors infiltrated its website using information on its…
SINGAPORE – Scammers are targeting Singaporeans by promoting an allegedly upgraded version of Facebook Messenger that redirects victims to scam sites that steal their data. And it appears they were promoting the scam with ads on Facebook itself. International cyber-security company Group-IB has flagged the scam campaign, which involves about 1,000 fake Facebook profiles targeting…
Cloud Access Security Brokers (CASB) , Cloud Security , Network Detection & Response Presented by iboss 60 minutes Secured Access Service Edge, or SASE, is no longer a buzzword tossed around by cybersecurity pundits but is a robust, cloud-based service model to enable secure anywhere, anytime access from any device. …
Lazarus APT, a North Korean threat actor known for its sophisticated attacks, has been observed using a clever method to bypass security mechanisms by hiding its malicious code within a bitmap (.BMP) image file used to drop a remote access trojan (RAT) capable of stealing sensitive information. According to researchers at Malwarebytes Labs,…
A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap (.BMP) image file to drop a remote access trojan (RAT) capable of stealing sensitive information.Attributing the attack to the Lazarus Group based on similarities to prior tactics adopted by the adversary, researchers…
3rd Party Risk Management , Endpoint Security , Governance & Risk Management KPN Disputes Reported Surveillance Risk to Users, Who Included Dutch Prime Minister Mathew J. Schwartz (euroinfosec) • April 20, 2021 KPN Telecom offices in Amersfoort, the Netherlands (Photo: Vysotsky via Wikimedia Commons) A bombshell news report suggests that Dutch mobile network…
New Delhi, Jubilant Foodworks that owns the master franchise for Domino’s Pizza in India on Tuesday said that although it experienced an information On Sunday, Alon Gal who is CTO of cyber security firm Hudson Rock, claimed that credit card details of nearly 10 lakh people who purchased online on….
Zscaler has agreed to purchase startup Trustdome and its technology that’s used to get control over who and what has access to data, applications, and services in public cloud environments. The cloud security vendor said Ramat Gan, Israel-based Trustdome’s Cloud Infrastructure Entitlement Management (CIEM) platform will help businesses reduce their public cloud attack surface and…
