Tags → #cybersecurity

Cyberattack by GruesomeLarch Targets Organizations Linked to Ukraine

In February 2022, cybersecurity firm Volexity uncovered a cyberattack by the Russian APT group GruesomeLarch, which exploited nearby Wi-Fi networks to gain access to organizations involved in Ukrainian projects.
Earth Kasha Malware Attacks Target Japan, Taiwan, and India

Earth Kasha, a cyber threat actor, has been linked to a series of sophisticated malware attacks targeting organizations in Japan, Taiwan, and India, utilizing advanced techniques and evolving malware such as LODEINFO and NOOPDOOR.
Injection Techniques in Computing Environments: A Tutorial

The article provides a detailed tutorial on using the `ptrace` system call for process injection in Linux, highlighting its functionalities and ethical considerations.
Investigation Reveals SSTI Vulnerabilities in FreeMarker Engine

Sayaan Alam, a member of the Synack Red Team, has investigated Server-Side Template Injection vulnerabilities in the FreeMarker template engine, revealing potential security risks associated with user input rendering in Java applications.
New Detection System for Advanced Persistent Threats Introduced

Researchers have introduced a new detection system named Winemaking, designed to improve the identification of Advanced Persistent Threats (APTs) by addressing limitations in traditional intrusion detection methods.
NodeStealer Malware Resurfaces with Enhanced Capabilities

NodeStealer, a Python-based infostealer that has evolved since its initial identification in 2023, poses a significant cybersecurity threat by targeting Facebook accounts and extracting sensitive financial information.
North Korea Identifies New Cyber Threat Group Moonstone Sleet

Moonstone Sleet, a newly identified North Korean APT group, is associated with targeted cyberattacks that blend espionage and financial motivations, employing advanced techniques such as spear-phishing and custom malware.
Novel Security Mechanism ACRIC Addresses Legacy System Vulnerabilities

The introduction of the Authenticated Cyclic Redundancy Integrity Check (ACRIC) aims to enhance security in legacy systems by providing a protocol-agnostic solution that maintains backward compatibility and minimizes transmission overhead.
Aeva Black Keynotes RustConf 2024 on Open Source Software

Aeva Black delivered the opening keynote at RustConf 2024, highlighting the importance of enhancing the security of open source software and discussing its significant economic impact.
BlueSky Surpasses 20 Million Users Amid Rising Scam Concerns

BlueSky, a decentralized microblogging platform, has surpassed 20 million users but is facing challenges with an increase in cryptocurrency scams and fraudulent activities.