Application Security
Beware of Malicious Packages: TurkoRat Malware Concealed in npm Repository
Recently, two packages named nodejs-encrypt-agent and nodejs-cookie-proxy-agent were detected on the npm package repository. Shockingly, these packages contained a dangerous information stealer malware known...
Beware of Malicious Loaders: Android Apps Infected with Trojanized Malware
TheCISO -
As the number of mobile phone users is increasing, so is the number of security threats that come along with it. Criminals have found...
Protect Your Network Now: US CISA Adds Veritas Backup Exec Vulnerabilities to Its Exploited Vulnerabilities Catalog
TheCISO -
The Cybersecurity and Infrastructure Security Agency (CISA) in the US has recently updated its Known Exploited Vulnerabilities Catalog to include five new issues that...
Beware of Nexus: A New Android Banking Trojan Targeting Financial Apps
Introduction to Nexus
A newly discovered Android banking trojan called Nexus is causing havoc in the financial industry. Cybersecurity analysts at Cleafy detected the...
New PerlBot Malware Targeting Poorly Managed Linux SSH Servers
AhnLab Security Emergency Response Center (ASEC) has uncovered a new variant of the ShellBot malware, which is also known as PerlBot. This Perl-based DDoS...
Protect Yourself from Bitwarden’s Risky Autofill Feature
Bitwarden, a popular open-source password management service, has a potentially dangerous security flaw that could allow threat actors to steal login credentials through malicious...
HeadCrab Malware Threatens Redis Servers
TheCISO -
A new type of malware, dubbed "HeadCrab", has been discovered by Nitzan Yaakov and Asaf Eitani, researchers at Aqua Security. It is designed to...
Critical Vulnerability Discovered in Jira Service Management Server and Data Center
TheCISO -
A critical security vulnerability has been discovered in Jira Service Management Server and Data Center, which has been assigned the CVE identifier CVE-2023-22501 and...
Zero-Day Vulnerability Found in Fortra’s GoAnywhere MFT
TheCISO -
A dangerous zero-day vulnerability has been discovered in Fortra's GoAnywhere Managed File Transfer (MFT) application and is currently being actively exploited. Security reporter Brian...
Apple Announces New Security Features
TheCISO -
Apple has announced the introduction of three new advanced security features focused on protecting against threats to user data in the cloud.
“At Apple, we...
Half of Twitter’s Workers Have Access to Its Code And User Confidential Data
TheCISO -
Twitter's former head of security accused the social media company and its executives of “extensive legal violations.”
Peiter Zatko, Twitter’s head of security who was...
Three New Web Application Security Risks Climb Up The OWASP Top 10
OWASP Top 10 is a standard awareness document which represent a consensus about the most critical security risks to web applications.
For the year 2021,...
