समस्या रैपिड7 के कर्मचारियों की ओर से “2024 हमला खुफिया रिपोर्ट” [1] यह एक अच्छी तरह से शोध की गई, अच्छी तरह से लिखी गई रिपोर्ट है जो सावधानीपूर्वक अध्ययन के योग्य है। कुछ मुख्य बातें ये हैं: 2023 में और 2024 की शुरुआत में व्यापक रूप से शोषण की गई 30 से अधिक नई कमजोरियों में से 53% शून्य-दिन थीं। एन-डे कमजोरियों की तुलना में शून्य-दिन की कमजोरियों से अधिक सामूहिक समझौता घटनाएँ हुईं।
Source: TheHackerNews
Jul 12, 2024The Hacker NewsDigital Security / Online Safety In today’s digital age, passwords serve as the keys to our most sensitive information, from social media accounts to banking and business systems. This immense power brings with it significant responsibility—and vulnerability. Most people don’t realize their credentials have been compromised until the damage is done….
Aug 06, 2024Ravie LakshmananMobile Security / Vulnerability Google has addressed a high-severity security flaw impacting the Android kernel that it has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. “There are indications that CVE-2024-36971 may be under limited, targeted…
The U.S. Federal Bureau of Investigation (FBI) on Monday announced the disruption of online infrastructure associated with a nascent ransomware group called Dispossessor (aka Radar). The effort saw the dismantling of three U.S. servers, three United Kingdom servers, 18 German servers, eight U.S.-based criminal domains, and one German-based criminal domain. Dispossessor is said to be…
जुलाई 09, 2024न्यूज़रूमआपूर्ति श्रृंखला हमला / वेब सुरक्षा अज्ञात खतरा पैदा करने वाले लोगों को ट्रोजनकृत संस्करण का प्रचार करते हुए पाया गया है। jQuery एनपीएम, गिटहब और जेएसडिलीवर पर जो कुछ हुआ, वह एक “जटिल और लगातार” आपूर्ति श्रृंखला हमले का उदाहरण प्रतीत होता है। फाइलम ने कहा, “यह हमला पैकेजों में उच्च परिवर्तनशीलता…
A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB. The campaign is part of a consumer investment fraud scheme that’s also widely known as pig butchering, in which prospective victims are lured into making…
Aug 21, 2024Ravie LakshmananMalware / Cryptocurrency Cybersecurity researchers have uncovered a new macOS malware strain dubbed TodoSwift that they say exhibits commonalities with known malicious software used by North Korean hacking groups. “This application shares several behaviors with malware we’ve seen that originated in North Korea (DPRK) — specifically the threat actor known as BlueNoroff…