Nov 23, 2024Ravie LakshmananArtificial Intelligence / Cryptocurrency The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period. These findings come from Microsoft, which said that multiple threat activity clusters with ties to the … Read more
Oct 20, 2024Ravie LakshmananVulnerability / Email Security Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing attack designed to steal user credentials. Russian cybersecurity company Positive Technologies said it discovered last month that an email was sent to an unspecified … Read more
Sep 09, 2024Ravie LakshmananVulnerability / {Hardware} Safety A novel side-channel assault has been discovered to leverage radio alerts emanated by a tool’s random entry reminiscence (RAM) as a knowledge exfiltration mechanism, posing a risk to air-gapped networks. The method has been codenamed RAMBO by Dr. Mordechai Guri, the pinnacle of the Offensive Cyber Analysis Lab … Read more