Sign in Subscribe

Edward Crowder

Editor in Chief and founder of CyberRisks.ai, previously a threat intelligence researcher at a top global MDR, specializes in global major incident detection and response.

WhatsApp Blocks Iranian Threat Actor APT42 in Targeted Phishing Campaign

WhatsApp Blocks Iranian Threat Actor APT42 in Targeted Phishing Campaign

On August 23, 2024, Meta's security team released a brief report detailing the disruption of a small cluster of malicious WhatsApp accounts linked to APT42, an Iranian threat actor notorious for phishing campaigns.

Linux Persistence Mechanisms: A Primer on Common Threat Techniques

Linux Persistence Mechanisms: A Primer on Common Threat Techniques

Elastic Security Labs released a comprehensive guide on Linux persistence mechanisms as part of the ongoing Linux Detection Engineering series. This guide is an educational resource for security researchers and defenders.

CISA Adds Versa Networks Director Vulnerability to Known Exploited Vulnerabilities Catalogue

CISA Adds Versa Networks Director Vulnerability to Known Exploited Vulnerabilities Catalogue

CISA announced the addition of a newly identified vulnerability in Versa Networks Director to its Known Exploited Vulnerabilities Catalogue. This vulnerability, designated CVE-2024-39717, is now recognized as a significant threat due to active exploitation in the wild.

ESET Uncovers NGate Android Malware Relaying NFC Traffic to Facilitate Unauthorized ATM Withdrawals

ESET Uncovers NGate Android Malware Relaying NFC Traffic to Facilitate Unauthorized ATM Withdrawals

ESET Research revealed a sophisticated crimeware campaign targeting customers of three central Czech banks. The attack utilized advanced Android malware named NGate, which can relay near-field communication (NFC) data from victims' payment cards via compromised Android devices.

NTLM Credential Theft in Python Windows Applications Discovered in Popular Frameworks

NTLM Credential Theft in Python Windows Applications Discovered in Popular Frameworks

On August 23, 2024, Horizon3.ai released a report exposing critical vulnerabilities in three widely used Python frameworks: Gradio, Jupyter Server, and Streamlit.

Halliburton Hit by Cyberattack, Disrupts Operations at Houston Headquarters

Halliburton Hit by Cyberattack, Disrupts Operations at Houston Headquarters

On August 21, 2024, U.S. oilfield services giant Halliburton reported a cyberattack that impacted its operations, particularly at its Houston headquarters.

Singapore's Operational Technology Cybersecurity Masterplan 2024: Securing the Future

Singapore's Operational Technology Cybersecurity Masterplan 2024: Securing the Future

The Masterplan 2024 addresses the evolving challenges and threats in the OT landscape, reflecting the advancements and heightened risk environment in sectors crucial to national infrastructure.