Tags → #stories

NoHat24 Conference Features Reverse Engineering Challenge

The NoHat24 security conference featured a Reverse Engineering challenge aimed at helping beginners navigate the complexities of analyzing a custom TCP protocol implemented in a statically compiled C/C++ binary.
Threat Actors Utilize Binance Smart Chain in Malware Campaign

Threat actors are increasingly using Binance's Smart Chain contracts in a malware campaign known as EtherHiding, which targets compromised WordPress sites to deliver malicious code.
Vulnerabilities Identified in Multipart Form-Data Parsers

The security of web application firewalls (WAFs) and multipart form-data handling is being examined due to vulnerabilities in existing parsers that do not fully comply with RFC standards.
Detection of Malware Packages in Open Source Registries

A detection platform identified 287 suspicious malware packages linked to a typosquatting campaign targeting developers using popular libraries, emphasizing the need for increased vigilance in the software development community.
Discovery of New Cyberattack Campaign CRON#TRAP

The Securonix Threat Research team has identified a new cyberattack campaign called CRON#TRAP, which utilizes a custom emulated Linux environment for malware staging and employs advanced techniques to evade detection.
HIBP Adds 1.26M Altenen Emails: Check if You’re Affected by the Breach

A significant data leak, potentially one of the largest in history, has been identified, encompassing approximately 12 terabytes of information and over 26 billion records from various platforms and government organizations.
Web Application Firewalls: Functions and Evasion Techniques

Web Application Firewalls (WAFs) are crucial for protecting web applications from various attacks, but they are not a complete solution for all cybersecurity threats.
Zero Trust Security Framework Gains Popularity Among Organizations

Zero Trust security is a cybersecurity framework that emphasizes continuous verification of user access and data protection, moving away from traditional perimeter-based models.
Check if You're Affected: Z-Library Copycat Breach Now on Have I Been Pwned

A copycat version of Z-Library exposed millions of users' data, including email addresses and passwords. This breach, now listed on Have I Been Pwned, highlights the risks of using piracy sites with weak security. Users are urged to check their status on HIBP, update passwords, and remain vigilant for phishing.
New Android Banking Trojan Named ToxicPanda Identified

The Cleafy Threat Intelligence team has identified a new Android banking Trojan named ToxicPanda, which targets banking institutions in Europe and Latin America and facilitates money transfers through account takeover techniques.