The U.S. Cybersecurity and Infrastructure Security Agency on Friday warned of crypto-mining malware embedded in “UAParser.js,” a popular JavaScript NPM library with over 6 million weekly downloads, days after the NPM repository moved to remove three rogue packages that were found to mimic the same library. The supply-chain attack targeting the open-source library saw three
0 Comments
The Centre has defended in the Delhi High Court the legal validity of its new IT rule requiring messaging apps, such as WhatsApp, to “trace” the first originator of the information, saying that the law empowers it to expect such entities to create safe cyberspace and counter illegal content either themselves or by assisting the
0 Comments
Android 12 is apparently causing app crashes and touch response issues for some Google Pixel phone users. The Android update that Google released earlier this week after some anticipation was meant to enhance user experience with Google’s new Material You design language and several underlying improvements. However, some users have reported online that soon after
0 Comments
Enterprise “data observability” is a hot space right now. Over the past couple of months, investors have pumped $200 million into each of Cribl and Grafana Labs, two data observability startups, and lesser amounts into related companies like Acceldata and DeepFactor. What’s behind this frenzy? Well, enterprise data systems are like a busy family household. From room to room,
0 Comments
In this article FB With an image of himself on a screen in the background, Facebook co-founder and CEO Mark Zuckerberg testifies before the House Financial Services Committee in the Rayburn House Office Building on Capitol Hill October 23, 2019 in Washington, DC. Chip Somodevilla | Getty Images Facebook on Friday was hit with multiple
0 Comments
The financially motivated FIN7 cybercrime gang has masqueraded as yet another fictitious cybersecurity company called “Bastion Secure” to recruit unwitting software engineers under the guise of penetration testing in a likely lead-up to a ransomware scheme. “With FIN7’s latest fake company, the criminal group leveraged true, publicly available information from various legitimate cybersecurity companies to
0 Comments
Microsoft today announced that it acquired Clear Software, a Zionsville, Indiana-based startup developing enterprise software automation technologies. In a blog post, Microsoft partner general manager Stephen Siciliano said that Clear’s solutions will “make it a more seamless experience” to use Microsoft’s Power Apps and Power Automate platforms to build automations for systems such as SAP
0 Comments
A new malware campaign targeting Afghanistan and India is exploiting a now-patched, 20-year-old flaw affecting Microsoft Office to deploy an array of commodity remote access trojans (RATs) that allow the adversary to gain complete control over the compromised endpoints. Cisco Talos attributed the cyber campaign to a “lone wolf” threat actor operating a Lahore-based fake
0 Comments