MQsTTang: Mustang Panda’s latest backdoor treads new ground with Qt and MQTT
ESET researchers tease apart MQsTTang, a new backdoor used by Mustang Panda, which communicates via the MQTT protocol The post…
Security
Acunetix releases a security check for Fortinet RCE flaw
This Acunetix release introduces a new security check for the Fortinet RCE flaw (CVE-2022-39952). The FortiNAC, a network security solution,…
The LastPass Breach: Unfolding The Story!
Good grief, LastPass.. The popular password management firm with a motive of safeguarding people’s sensitive information, has become a breach…
Dumb Password Rules
Troy Hunt is collecting examples of dumb password rules. There are some pretty bad disasters out there. My worst experiences…
BlackLotus UEFI bootkit: Myth confirmed
The first in-the-wild UEFI bootkit bypassing UEFI Secure Boot on fully updated UEFI systems is now a reality The post…
Fooling a Voice Authentication System with an AI-Generated Voice
A reporter used an AI synthesis of his own voice to fool the voice authentication system for Lloyd’s Bank.
ESET Research Podcast: Ransomware trashed data, Android threats soared in T3 2022
And that’s just the tip of the iceberg when it comes to the trends that defined the cyberthreat landscape in…
Australia Implements Stronger Cyber Security Measures Against Threats
Following a series of major data breaches in Australia, the government is undertaking a significant overhaul of its cyber security…
Side-Channel Attack against CRYSTALS-Kyber
CRYSTALS-Kyber is one of the public-key algorithms currently recommended by NIST as part of its post-quantum cryptography standardization process. Researchers…
Dutch Police arrests 3 men involved in a massive extortion scheme. One of them is an ethical hacker
The Dutch police arrested three individuals as a result of an investigation into computer trespass, data theft, extortion, extortion, and…