News

SafeMoon claims exploited vulnerability was to blame

The only backup you will ever regret is the one you didn’t make…

Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into.

Latest episode – listen now!

Now this is interesting:

Thousands of pages of secret documents reveal how Vulkan’s engineers have worked for Russian military and intelligence agencies to support hacking operations, train operatives before attacks on national infrastructure, spread disinformation and control sections of the internet.

The company’s work is linked to the federal security service or FSB, the domestic spy agency; the operational and intelligence divisions of the armed forces, known as the GOU and GRU; and the SVR, Russia’s foreign intelligence organisation.

Lots more at the link.

The documents are in Russian, so it will be a while before we get translations.

Spyware vendors facilitated the spread of malware by government-backed threat actors

The vulnerability has a CVSS score of 7.2 and was exploited against several companies in the US

The new Salt Security report found that 80% of attacks happened over authenticated APIs

The breach was caused by a bug in an open-source library

New principles designed to disrupt and limit a rapidly growing market