Cybersecurity News - Page 322

LazyScripter is not as sophisticated as other APT groups and mostly relies on open source and commercially available RATs.

CVE-2021-20016 is an SQL injection flaw that allows a remote attacker to execute arbitrary SQL queries in database.

The attacks exploited several vulnerabilities in Accellion’s FTA product in order to gain access and steal data.

The researchers uncovered two versions of the Silver Sparrow malware designed to target Intel x86_64 and Appe M1 ARM64 architectures.

A weekly vulnerability digest.

The agency said it has no evidence that any SSO accounts have been compromised.

Microsoft says it has completed the investigation into its SolarWinds breach.

The trio allegedly carried out the cyber attacks on behalf of the Reconnaissance General Bureau, North Korea’s military intelligence agency.

The ScamClub group used a novel method to bypass WebKit iframe sandboxing feature by using an event listener for a “message” event.

South Korea's spy agency said it has found evidence of attempts to breach Pfizer’s computers.