The campaign is currently active and relies on poisoning search results to push a website mimicking Microsoft’s promotional page for Windows 11, to offer the information stealer.
The Synopsys report also details the pervasive risks posed by unmanaged open source, including security vulnerabilities, outdated or abandoned components, and license compliance issues.
Citizen Lab researchers identified evidence of HOMAGE, a previously-undisclosed iOS zero-click vulnerability used by NSO Group that was effective against some versions prior to 13.2.
To provide defense in depth, the principles of zero-trust architecture, as elaborated by NIST, need to be adopted in system design and operation. Data should be protected across all three phases of its lifecycle: at rest, in motion, and in use.
ZingoStealer targets multiple apps/wallets such as Chrome, Opera, TronLink, Zcash, Bitcoin, Armory, BitApp, and Nifty Wallet. Further, it attempts to steal various computer information such as IP, computer name, and OS version, among others.
With the accelerating growth of public, private, hybrid, and multi-cloud models, sensitive or critical data is being proliferated throughout the environment at unbelievable rates.
Contra Costa County officials have begun sending out letters this week to potential victims of the “unauthorized access to certain county employee email accounts” in a computer breach between July to August of last year.
Some of the 318,379 patients whose health data was accessed during a July 2021 hack of SuperCare filed two separate lawsuits, claiming inadequate security led to the exposure in possible violation of FTC and HIPAA regulations.
Just hours after highlighting that it had attracted more than $150 million in TVL, Beanstalk Farms reported that it became the latest DeFi victim of a cybersecurity breach.
Source Music has been ordered to pay a fine of 3 million Won (approximately $2,438) by South Korea’s Personal Information Protection Commission (PIPC) for leaking user information via a Google questionnaire.