Tags → #stories

Threats
Cyber-Espionage Campaign by TAG-110 Targets Multiple Regions
Nov 21, 2024 Insikt Group has reported the emergence of a cyber-espionage campaign attributed to TAG-110, which primarily targets organizations in Central Asia, East Asia, and Europe.
Threats
Cybersecurity Incident Involves LevelBlue's MDR Security Operations Center
Nov 21, 2024 A cybersecurity incident involving LevelBlue's Managed Detection and Response (MDR) Security Operations Center has underscored the importance of monitoring persistence mechanisms, following the detection of a potentially unwanted application that utilized suspicious registry keys and scheduled tasks.
Tools
DexRay: New Approach for Image-Based Malware Detection
Nov 21, 2024 Recent research introduces DexRay, a novel pipeline for image-based malware detection that converts bytecode from DEX files into grey-scale vector images processed by a 1-dimensional Convolutional Neural Network, achieving a high detection rate on a large dataset.
Threats
ESET Identifies Linux Backdoor Linked to Gelsemium APT Group
Nov 21, 2024 ESET researchers have identified multiple samples of a Linux backdoor named WolfsBane, attributed to the Gelsemium APT group, marking the first public report of their use of Linux malware.
Tools
Foray Framework Enhances Security for DeFi Applications
Nov 21, 2024 Foray is a newly developed attack synthesis framework aimed at improving the security of Decentralized Finance applications by effectively identifying vulnerabilities in smart contracts.
Tools
Increase in Leaked Secrets Reported by GitGuardian in 2023
Nov 21, 2024 In 2023, GitGuardian reported over 12 million instances of leaked secrets in public GitHub repositories, highlighting a significant rise in sensitive information exposure among developers.
Industry
ISRG Launches Prossimo Project for DNS Tool Development
Nov 21, 2024 The Internet Security Research Group (ISRG) has launched the Prossimo project in collaboration with Ferrous Systems to develop a memory safety initiative for DNS tools aimed at enhancing internet security.
Industry
Joshua Liebow-Feeser Presents at RustConf 2024 in Montreal
Nov 21, 2024 Joshua Liebow-Feeser, a Software Engineer at Fuchsia Security, presented on Rust's "X-safety" feature at RustConf 2024, highlighting its potential to enhance software reliability and address critical challenges in various domains.
Threats
Malicious Update Detected in Python Package "aiocpa"
Nov 21, 2024 On November 20, 2024, Phylum's automated risk detection platform identified a malicious update in the "aiocpa" package on PyPI, which was designed to steal private keys through obfuscated code.
Tools
Martin Pool Presents Cargo Mutants Tool at RustConf 2024
Nov 21, 2024 Martin Pool, a member of the Stripe Security Team, presented a tool called Cargo Mutants at RustConf 2024, aimed at enhancing program reliability by identifying gaps in test coverage through the introduction of synthetic bugs.