Page 42 - Mobile Security News Today

minute read Share this article: David “moose” Wolpoff, co-founder and CTO at Randori, talks lesser-known hacking paths, including unresolved “fixme” flags in developer support groups. Blue teamers are in constant battle against hackers — faceless adversaries whose persistence can seem unending. But these actors have processes just like corporate operations, even if theirs are bootlegged. Attackers seek the path of least resistance: Gain access with as little effort as pos...

Vi Business Plus introduces new mobility offerings for enterprises ​ By IANS | ​ 6 Views   Vodafone Idea moves SC over errors in DOTs AGR calculation. (Photo Credit: Twitter/@BQthefineprint). Image Source: IANS News Mumbai, April 22 : Vi Business, the enterprise arm of Vodafone Idea Ltd (VIL), has introduced new post-paid plans designed for businesses and working professionals. Vi Business Plus is a mobility solution, which enables mobile workforce to connect, communicate, collaborate an...

minute read Share this article: Even if the app is not installed or in use, threat actors can use it to spread malware through email campaigns and take over victims’ machines, new research has found. Hackers are leveraging the popular Telegram messaging app by embedding its code inside a remote access trojan (RAT) dubbed ToxicEye, new research has found. A victim’s computer infected with the ToxicEye malware is controlled via a hacker-operated Telegram messaging account. The To...

minute read Share this article: CVE-2021-22893 allows remote code-execution (RCE) and is being used in the wild by nation-state cyberattackers to compromise VPN appliances in defense, finance and government orgs. A critical zero-day security vulnerability in Pulse Secure VPN devices has been exploited by nation-state actors to launch cyberattacks against U.S. defense, finance and government targets, as well as victims in Europe, researchers said. Download “The Evolution of Ransom...

minute read Share this article: Attacks dubbed ‘Fajan’ by researchers are specifically targeted and appear to be testing various threat techniques to find ones with the greatest impact. A new e-mail-based campaign by an emerging threat actor aims to spread various remote access trojans (RATs) to a very specific group of targets who use Bloomberg’s industry-based services. Cisco Talos Intelligence researchers discovered the campaign, dubbing it and its perpetrator “Fajan” ...

The Mozilla Foundation releases Firefox 88, fixing 13 bugs ranging from high to low severity. The Mozilla Foundation fixed a flaw in its Firefox browser that allowed spoofing of the HTTPS secure communications icon, displayed as a padlock in the browser address window. Successful exploitation of the flaw could have allowed a rogue website to intercept browser communications. Padlock Bug: False Sense of Security Tracked as CVE-2021-23998, the secure-lock-icon bug effects both the consumer and c...

Sponsored by: minute read Share this article: A vendor develops the series logically so that the tools do not just cover individual needs, but complement each other. For example, the concept of SearchInform is to ensure control of threats at all levels of the information network: from hardware and software to file systems and databases, from user actions on a PC to their activity on the Internet. Written by Sergey Ozhegov, CEO of SearchInform In the early days of info...

Key Findings The COVID-19 situation aggravated the vulnerability of the country to cyber threats as a lot of employees accessed malicious links while operating in remote working situations.  Organizations and public enterprises have increased their investment in information security systems on the back of increased awareness towards the importance of data security. Companies are also expected to increase the appointment of IT professionals in dedicated cybersecurity roles. Frequent cloud mig...

minute read Share this article: Sivan Tehila, cybersecurity strategist at Perimeter 81, discusses climate change and the cyber-resilience lessons companies should take away from dealing with the pandemic. Few could have anticipated the impact COVID-19 has had on business. It spread from an isolated outbreak to a global pandemic seemingly overnight, and IT leaders across the planet have had mixed success adjusting to the changes and uncertainty it has brought. While COVID-19 caught ...

Two cyberattack campaigns are making the rounds using unique social-engineering techniques. The BazarLoader malware is leveraging worker trust in collaboration tools like Slack and BaseCamp, in email messages with links to malware payloads, researchers said. And in a secondary campaign aimed at consumers, the attackers have added a voice-call element to the attack chain. Join experts from Digital Shadows (Austin Merritt), Malwarebytes (Adam Kujawa) and Sift (Kevin Lee) to find out how cybercrim...