Tag: security
Has Pakistan begun the crackdown on “unregistered” VPNs?
In what would appear to be the beginning of the implementation of VPN-restricting legislation in Pakistan, many residents have reported issues accessing their VPN services. On Sunday, November 9, 2024, people in Pakistan lamented issues using the best VPN apps. After the initial silence, authorities later confirmed to local publications…
Read More
Millions of jobseekers could be at risk after private data leaked online by recruitment firm
Over 200,000 records of jobseekers were left exposed in a database The records included sensitive PII that could be used in scams and fraud It isn’t known how long the database was left exposed, or who accessed it Over two million records belonging to Alltech Consulting Services have been discovered…
Read More
Watch out, that Excel document could be infected with dangerous malware
A new phishing campaign was recently spotted, distributing an Excel file The file drops a fileless version of the Remcos RAT on the device Remcos can steal sensitive files, log keys, and more Hackers have been seen distributing a fileless version of the Remcos Remote Access Trojan (RAT), which they…
Read More
Windows machines are being targeted with ZIP file workaround
Crooks can merge multiple ZIP archives into a single file Archiver software rarely reads, or displays, all of the merged archives As a result, crooks can sneak malware onto a device Hackers are using ZIP file concatenation to bypass security solutions and infect their targets with malware through email messages,…
Read More
D-Link says it won’t fix a serious security flaw affecting 60,000 older NAS devices
A critical vulnerability has been found in multiple D-Link models Since the devices have reached end-of-life status, they won’t be patched Mitigations are available, although users are advised to replace the devices D-Link says it won’t fix a critical vulnerability plaguing tens of thousands of network-attached storage (NAS) devices because…
Read More
AWS keys stolen by malicious PyPI package with thousands of downloads
Researchers discover three-year old malicious package in PyPI The package is a typosquatted version of Fabric, with 37,000 downloads Its goal is to steal AWS login credentials from the developers A malicious Python package has been hiding in the Python Package Index (PyPI) for years, stealthily stealing people’s Amazon Web…
Read More