Apr 27, 2025Ravie LakshmananKubernetes / Cloud Security Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year. “The attack involves the use of AzureChecker.exe, a Command Line Interface (CLI) tool that is being used by a wide range … Read more
Apr 24, 2025Ravie LakshmananMalware / Threat Intelligence At least six organizations in South Korea have been targeted by the prolific North Korea-linked Lazarus Group as part of a campaign dubbed Operation SyncHole. The activity targeted South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, according to a report from Kaspersky published today. The earliest … Read more
Unlock the Editor’s Digest for free Roula Khalaf, Editor of the FT, selects her favourite stories in this weekly newsletter. South Korea’s economy contracted in the first quarter, with political turmoil hitting consumer sentiment in Asia’s fourth-largest economy while business concerns grew over President Donald Trump’s tariffs on exports to the US. South Korean GDP … Read more
A security researcher has discovered that the websites of over 100 car dealerships have been compromised in a supply-chain attack that attempted to infect the PCs of internet visitors. As researcher Randy McEoin explains in a blog post, cybercriminals infected the systems of LES Automotive, a company which provides a video services to help car … Read more
Insurance giant Allstate is set to face civil charges after falling victim to a pair of data breaches.New York State Attorney General Letitia James filed suit against Allstate and its affiliated companies on charges of failing to protect customer data when estimating car insurance quotes.In the suit, James alleged that Allstate and National General Insurance … Read more