A major update to the popular package manager npm has just been rolled out, with significant implications for developers and users of open-source software. As of July 9th, npm version 12 will no longer execute install scripts by default, a change aimed at reducing the risk of supply chain attacks. This move comes in response … Read more
A New Windows Backdoor Emerges, Wiping Data and Spying on Users In a worrying development, researchers have uncovered a sophisticated backdoor malware targeting Windows systems, capable of wiping entire disks, spreading fake ransomware, and installing spyware. The new threat, discovered by experts at cybersecurity firm ESET, has been dubbed “GigaWiper.” If you use a Windows … Read more
A worrying trend is unfolding on GitHub, where attackers are using dormant accounts to blend in and map corporate organizations’ internal structures. Researchers have uncovered evidence of malicious activity involving these seemingly inactive profiles, which raises significant concerns about the potential for insider threats or compromised credentials. The issue highlights the importance of monitoring even … Read more
Microsoft has announced plans to retire the lightweight version of its Outlook Web App email client, known as OWA Light, from Exchange Server. The decision marks a significant shift in Microsoft’s focus towards modernizing its web-based email experience, and it will likely have far-reaching implications for organizations that still rely on outdated systems. For those … Read more
Microsoft is ramping up its efforts to bolster Windows security through artificial intelligence (AI) as the company relies increasingly on AI-powered tools to uncover vulnerabilities in its codebase. As a result, users can expect to see more frequent and extensive security updates in the coming months. The acceleration of vulnerability discovery thanks to advances in … Read more
A new threat group called Helix has emerged, using sophisticated tactics to steal sensitive data from SharePoint environments. The group’s modus operandi involves voice phishing, device code phishing, and multi-factor authentication abuse to gain access to victim accounts. Once inside, Helix operators quickly register a new authenticator app for persistence, browse and enumerate SharePoint, and … Read more
A New Era of Cyber Threats Emerges with Cloud Bucket Hijacking and AI-Powered Vulnerability Discovery The latest threat landscape is proving more complex than ever, with a surge in sophisticated attacks targeting cloud storage buckets and exploiting software vulnerabilities discovered by artificial intelligence models. In this new era of cyber threats, even the most seemingly … Read more
A major blow has been dealt to the world of software development, with npm – one of the largest package managers for JavaScript – taking a crucial step towards mitigating the risk of supply chain attacks. As of its latest release, npm 12 disables install scripts by default, a move that is expected to have … Read more
As Global Conflicts Go Digital, Businesses Need Wartime Gameplans The recent cyberattack on Ukrainian tax software company Intellect Services is a stark reminder that modern warfare has gone digital. The devastating consequences of the NotPetya malware, which spread globally and caused tens of billions of dollars in damage to thousands of companies, demonstrate how businesses … Read more
A major vulnerability in Microsoft’s Defender security software has been patched by the company after a researcher exposed it. The flaw, known as “RoguePlanet,” allowed attackers to gain high-level system privileges on fully patched Windows 10 and Windows 11 devices. This serious issue was disclosed by an independent security researcher using the handle Nightmare Eclipse, … Read more