Page 107 - Application Security News Today

Cryptojacking group TeamTNT is leveraging compromised Amazon Web Services credentials to attack its cloud environments through the platform’s API, according to

Criminals tricked into using an FBI-run encrypted messaging app, Verizon's 2021 Breach Investigations Report and overcoming the challenges of recruiting

APT Group Kimsuky Has New Attack Technique, Researchers Say Compliance @prajeetspeaks) • June 9, 2021     Get Permission Researchers at Malwarebytes have uncovered the latest tactics, techniques and procedures used by the North Korean threat group Kimsuky, also known as Thallium, Black Banshee and Velvet Chollima, as it continues to launch espionage attacks. This time it is using an AppleSeed backdoor. The Kimsuky g...

Synopsys (SNPS) has acquired Code Dx for an undisclosed amount. Synopsys is an electronic design automation company that focuses on silicon design and verification, silicon intellectual property and software security and quality. Code Dx is the provider of an application that automates and accelerates the discovery, prioritization, and remediation of software vulnerabilities. The terms of the deal have been kept under wraps. The acquisition expands Synopsys’ portfolio of application secur...

Chinese APT Group Reportedly Develops Custom Backdoor @prajeetspeaks) • June 9, 2021     Full infection chain (Source: Check Point Research) Check Point researchers have uncovered an ongoing campaign by a Chinese advanced persistent threat group that has spent the last three years testing and refining a custom backdoor in its arsenal to conduct espionage campaigns targeting governments in Southeast Asia. The group, d...

Microsoft's June Patch Tuesday contained patches for six zero-day vulnerabilities being exploited in the wild, including two flaws detected by Kaspersky that were

Content delivery network Fastly says its global outage on Tuesday was caused by an unanticipated software bug, which it has now patched. IT experts caution that

Brinqa Announces $110 Million in Growth Funding to Accelerate Adoption of Risk-based Cybersecurity Self-funded Brinqa has been profitable with strong growth since 2017; funding round from insight partners is companys first institutional investment. AUSTIN, Texas, June 8, 2021 – Brinqa™, a leader in Cyber Risk Management, today announced that it has received $110 million in growth capital from leading global venture capital and private equity firm Insight Partners. Bootstrapped and founde...

Security researchers have identified two vulnerabilities in the Joomla content management system that can be chained together for complete compromise of the

Did you miss ESET's Lukas Stefanko presentation on Stalkerware at RSA this year? It looked at our analysis of dozens of Android stalkerware families, which are