Understanding Ghost Tap: A New Threat in Mobile Payments Threat actors are increasingly banking on a new technique that leverages near-field communication (NFC) to cash out victims' funds. Known as Ghost Tap, this method allows cybercriminals to exploit stolen credit cards linked to mobile payment services like Google Pay and Apple Pay. By relaying NFC…
Understanding Non-Human Identities (NHIs) in Cybersecurity The frequency and sophistication of modern cyberattacks are surging, making it increasingly challenging for organizations to protect sensitive data and critical infrastructure. Attackers often target non-human identities (NHIs), which can lead to serious security threats. When attackers compromise an NHI, they can move laterally across systems in minutes, identifying…
Decade-Old Security Vulnerabilities in Needrestart Package Ubuntu Server, a popular operating system, has had its share of security challenges over the years. Recently, multiple decade-old security vulnerabilities have been disclosed in the needrestart package that is installed by default since version 21.04. These flaws could allow a local attacker to gain root privileges without requiring…
New Cyber Espionage Threat: Liminal Panda A new China-linked cyber espionage group, known as Liminal Panda, has been linked to a series of targeted attacks on telecommunications entities across South Asia and Africa. Active since at least 2020, this group aims to gather critical intelligence. Their sophisticated techniques for carrying out cyber espionage make them…
Oracle Alerts Users of High-Severity Vulnerability in Agile Product Lifecycle Management (PLM) Framework Oracle has issued a critical warning regarding a significant security flaw impacting its Agile Product Lifecycle Management (PLM) Framework. This vulnerability, identified as CVE-2024-21287, comes with a high severity rating of 7.5 on the Common Vulnerability Scoring System (CVSS). It is crucial…
Apple Security Updates Address Critical Vulnerabilities Apple has recently rolled out crucial security updates for its operating systems, including iOS, iPadOS, macOS, visionOS, and Safari. These updates specifically target two zero-day vulnerabilities that have been actively exploited by attackers. Addressing these security gaps is vital for protecting user data and maintaining device integrity. Understanding the…
Malicious Exploitation of Misconfigured JupyterLab and Jupyter Notebooks JupyterLab and Jupyter Notebooks have gained popularity among data scientists and researchers for their flexibility and functionality. However, recent reports indicate that malicious actors are exploiting misconfigured Jupyter environments to conduct stream ripping and enable sports piracy through live streaming capture tools. This alarming trend highlights the…
The Ngioweb Botnet and its Impact on Proxy Services Recent findings from Lumen Technologies reveal the prominent role of the Ngioweb malware in powering notorious residential proxy services. Among these services are NSOCKS, VN5Socks, and Shopsocks5. Understanding how the Ngioweb botnet operates is essential, as it affects many unsuspecting users and homes. According to the…
Understanding the Risks of Privileged Accounts Privileged accounts open the door to various security threats in any organization. These accounts have elevated access rights and can easily be misused if not properly secured. While many companies focus solely on managing privileged access, it is essential to prioritize the security of both the accounts and the…
Understanding the Helldown Ransomware: A Rising Threat Cybersecurity researchers have recently uncovered a Linux variant of a relatively new ransomware strain, Helldown. This discovery indicates that threat actors are expanding their attack focus. Helldown deploys Windows ransomware derived from the LockBit 3.0 code. As the landscape of cyber threats continues to evolve, it is crucial…