cyber-sec - Tumblr blog

[cyber-sec]

Google blocked 2.3M apps from Play Store last year for breaking the G law

Source: https://www.theregister.com/2024/04/29/google_rejected_apps/

More info: https://security.googleblog.com/2024/04/how-we-fought-bad-apps-and-bad-actors-in-2023.html

[cyber-sec]

Muddling Meerkat hackers manipulate DNS using China’s Great Firewall

Source: https://www.bleepingcomputer.com/news/security/muddling-meerkat-hackers-manipulate-dns-using-chinas-great-firewall/

More info: https://blogs.infoblox.com/threat-intelligence/a-cunning-operator-muddling-meerkat-and-chinas-great-firewall/

Report: https://insights.infoblox.com/resources-report/infoblox-report-muddling-meerkat-the-great-firewall-manipulator

[cyber-sec]

London Drugs closes all of its pharmacies following 'cybersecurity incident'

Source: https://www.theregister.com/2024/04/29/canada_london_drugs/

[cyber-sec]

Study Reveals Alarming Levels of USPS Phishing Traffic

Source: https://www.infosecurity-magazine.com/news/study-reveals-usps-phishing-levels/

More info: https://www.akamai.com/blog/security-research/phishing-usps-malicious-domains-traffic-equal-to-legitimate-traffic

[cyber-sec]

Judge0 Sandbox Vulnerabilities Expose Systems to Takeover Risk

Source: https://www.infosecurity-magazine.com/news/judge0-sandbox-flaws-systems/

More info: https://tantosec.com/blog/judge0/

[cyber-sec]

Should Cybersecurity Leadership Finally be Professionalized?

Source: https://www.securityweek.com/should-cybersecurity-leadership-finally-be-professionalized/

[cyber-sec]

Infosec in brief: Discord dismantles Spy.pet site that snooped on millions of users

Source: https://www.theregister.com/2024/04/29/infosec_in_brief/

[cyber-sec]

Okta warns of "unprecedented" credential stuffing attacks on customers

Source: https://www.bleepingcomputer.com/news/security/okta-warns-of-unprecedented-credential-stuffing-attacks-on-customers/

More info: https://sec.okta.com/blockanonymizers

[cyber-sec]

Bogus npm Packages Used to Trick Software Developers into Installing Malware

Source: https://thehackernews.com/2024/04/bogus-npm-packages-used-to-trick.html

More info: https://www.securonix.com/blog/analysis-of-devpopper-new-attack-campaign-targeting-software-developers-likely-associated-with-north-korean-threat-actors/

[cyber-sec]

How spammers exploit hijacked corporate domains

Source: https://www.kaspersky.com/blog/domain-hijacking-subdomailing/51097/

[cyber-sec]

7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike

Source: https://www.hackread.com/microsoft-office-0-day-exploited-cobalt-strike/

More info: https://www.deepinstinct.com/blog/uncorking-old-wine-zero-day-cobalt-strike-loader

[cyber-sec]

OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

Source: https://www.techrepublic.com/article/openai-gpt4-exploit-vulnerabilities/

Paper: https://arxiv.org/pdf/2404.08144

[cyber-sec]

Haunted by breaches, Microsoft is ‘putting security above all else,’ vows CEO Satya Nadella

Source: https://www.geekwire.com/2024/haunted-by-repeated-breaches-microsoft-is-putting-security-above-all-else-vows-ceo-satya-nadella/

[cyber-sec]

3 ways AI is transforming cloud security, according to experts

Source: https://www.techtarget.com/searchsecurity/tip/Ways-AI-is-transforming-cloud-security-according-to-experts

[cyber-sec]

Nation-state hackers exploit Cisco firewall 0-days to backdoor government networks

Source: https://arstechnica.com/security/2024/04/cisco-firewall-0-days-under-attack-for-5-months-by-resourceful-nation-state-hackers/

More info: https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/

[cyber-sec]

Almost every Chinese keyboard app has a security flaw that reveals what users type

Source: https://www.technologyreview.com/2024/04/24/1091740/chinese-keyboard-app-security-encryption/

More info: https://citizenlab.ca/2024/04/vulnerabilities-across-keyboard-apps-reveal-keystrokes-to-network-eavesdroppers/

[cyber-sec]

Google Patches Critical Chrome Vulnerability

Source: https://www.securityweek.com/google-patches-critical-chrome-vulnerability/

More info: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html