Month: October 2023

Microsoft have just released the latest Digital Defence Report, and the findings are not great. The report is one which Microsoft produces annually and this latest one covers the period from July 2022 through to June 2023. In this latest report, the results show that there aren’t many new issues, […]

It’s a well known fact that cyber attacks are becoming more and more commonplace in times of conflict – that much is well-established with the Russian attacks on Ukraine. Russia and Ukraine trade attacks in cyber space almost as frequently as they do on the battle field. The recent state […]

Cryptography specialist Filippo Valsorda has issued a challenge for the first person to crack the seed values for elliptic curve cryptography and recover the plain text values which were used to generate them back in 1997. Elliptic Curve Cryptography (ECC) was chosen as the alternative to RSA cryptography, the reason […]

Twenty-Two year-old Sebastien Raoult, a French citizen from the eastern town of Epinal has submitted a guilty plea to the U.S. Attorney’s office in Washington. Raoult, who was known online as Sezyo Kaizen, was a member of the hacking group ShinyHunters which ransomed and leaked personal data from more then […]

Last weekend, users of the mobile network Lyca started to experience difficulties using the network, especially when trying to log in to their user accounts to top-up their credit. Following these events, Lyca Mobile UK have issued a statement in which they have admitted to have been subject to a […]

A number of Proof-Of-Concept (PoC) exploits have surfaced on the Internet which target a high-severity flaw in a number of Linux distributions which give attackers Root privileges if sucessful. The vulnerability is tracked as CVE-2023-4911 and relates to a buffer overflow issue which if exploited can give an attacker the […]

The International Committee of the Red Cross (ICRC) has issued a first-of-its-kind rules of engagement for civilian hackers in conflicts. The organisation released the rules this week in the wake of unprecedented numbers of civilians joining patriotic cyber-gangs since the Russian invasion of Ukraine. The ICRC statement says that Patriotic […]

Researchers at securityaffairs have released an fascinating insight in to the global infrastructure used by LockBit during their ransomware attacks. The blog post : “LIGHTING THE EXFILTRATION INFRASTRUCTURE OF A LOCKBIT AFFILIATE (AND MORE)” gives a detailed look at how one common string of characters led the researchers on a […]

Security researchers at Zscaler have discovered a new malware-as-a-service (MaaS) named ‘BunnyLoader’ being advertised on multiple dark web forums as a file-less loader that can perform multiple tasks including data stealing, keystroke sniffing, and replacing the contents of a victims system clipboard. Rapid development The researchers said in their report […]

North Korean hacking group – Lasarus are currently running a targeted campaign against people in specific industry sectors via an elaborate social engineering campaign dubbed Operation DreamJob. As the name suggests, the operation begins with identifying people who are seeking new employment via social media platforms such as LinkedIn and […]