More MOVEit vulnerabilities found while the first one still resonates
In early June, we reported on the discovery of a critical vulnerability in MOVEit Transfer—known as CVE-2023-34362. After the first vulnerability was discovered, MOVEit’s owner Progress Software partnered with third-party cybersecurity experts to conduct further detailed code reviews of the software. Now, Progress says it has discovered multiple SQL injection vulnerabilities in the MOVEit Transfer web application that could allow […]
Strava heatmap loophole may reveal users’ home addresses
Researchers at NC State University have outlined potential privacy issues with popular fitness app Strava which could lead to users’ homes being pinpointed. The researchers’ findings are detailed in a paper called Heat marks the spot: de-anonymising users’ geographical data on the Strava heat map. Strava, used by more than 100 million people, includes features […]
API Security: Unveiling Best Practices for a Secure Digital Ecosystem
By Owais Sultan API security is crucial for protecting data, maintaining privacy, and preventing unauthorized access. Let’s delve into some of… This is a post from HackRead.com Read the original post: API Security: Unveiling Best Practices for a Secure Digital Ecosystem
Balancing User and Business Needs: The Key to Successful Digital Product Strategy
By Owais Sultan Balancing user and business needs is vital for successful digital product strategy. Achieving an equilibrium between user-centric design… This is a post from HackRead.com Read the original post: Balancing User and Business Needs: The Key to Successful Digital Product Strategy
Pink Drainer Posed as Journalists, Stole $3M from Discord and Twitter Users
By Habiba Rashid Pink Drainer hacking group has been employing sophisticated social engineering techniques, often masquerading as journalists from reputable media outlets like Decrypto and Cointelegraph. This is a post from HackRead.com Read the original post: Pink Drainer Posed as Journalists, Stole $3M from Discord and Twitter Users
Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer
Security researchers have warned about an “easily exploitable” flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. “A threat actor could impersonate a popular publisher and issue a malicious extension to compromise a targeted system,” Varonis researcher Dolev Taler said. “Malicious
Why Now? The Rise of Attack Surface Management
The term “attack surface management” (ASM) went from unknown to ubiquitous in the cybersecurity space over the past few years. Gartner and Forrester have both highlighted the importance of ASM recently, multiple solution providers have emerged in the space, and investment and acquisition activity have seen an uptick. Many concepts come and go in cybersecurity, but attack surface […]
Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable
A fully undetectable (FUD) malware obfuscation engine named BatCloak is being used to deploy various malware strains since September 2022, while persistently evading antivirus detection. The samples grant “threat actors the ability to load numerous malware families and exploits with ease through highly obfuscated batch files,” Trend Micro researchers said. About 79.6% of the total 784 artifacts
Understanding AI risks and how to secure using Zero Trust
I. Introduction AI’s transformative power is reshaping business operations across numerous industries. Through Robotic Process Automation (RPA), AI is liberating human resources from the shackles of repetitive, rule-based tasks and directing their focus towards strategic, complex operations. Furthermore, AI and machine learning algorithms can decipher the huge sets of data at an unprecedented speed and […]
Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme
A previously undetected cryptocurrency scam has leveraged a constellation of over 1,000 fraudulent websites to ensnare users into a bogus rewards scheme since at least January 2021. “This massive campaign has likely resulted in thousands of people being scammed worldwide,” Trend Micro researchers said in a report published last week, linking it to a Russian-speaking threat actor […]