Cyber Defense Advisors

Month: April 2024

  • by
  • April 15, 2024

Zambia arrests 77 people in swoop on “scam” call centre

Graham CLULEY April 15, 2024 Promo Protect all your devices, without slowing them down. Free 30-day trial Law enforcement officers in Zambia have arrested 77 people at a call centre company they allege had employed local school-leavers to engage in scam internet users around the world. According to Zambian authorities, Chinese-run Golden Top Support Services, […]

Cyber News
  • by
  • April 15, 2024

Chinese-Linked LightSpy iOS Spyware Targets South Asian iPhone Users

Cybersecurity researchers have discovered a “renewed” cyber espionage campaign targeting users in South Asia with the aim of delivering an Apple iOS spyware implant called LightSpy. “The latest iteration of LightSpy, dubbed ‘F_Warehouse,’ boasts a modular framework with extensive spying features,” the BlackBerry Threat Research and Intelligence Team said in a report published last week. […]

Cyber News
  • by
  • April 15, 2024

Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability

Palo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild. Tracked as CVE-2024-3400 (CVSS score: 10.0), the critical vulnerability is a case of command injection in the GlobalProtect feature that an unauthenticated attacker could weaponize to execute arbitrary code with root […]

Cyber News
  • by
  • April 14, 2024

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking twice at RSA Conference 2024 in San Francisco. I’ll be on a panel on software liability on May 6, 2024 at 8:30 AM, and I’m giving a keynote on AI and democracy on May 7, 2024 at 2:25 PM. […]

Cyber News
  • by
  • April 13, 2024

Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 million. Shakeeb Ahmed, the defendant in question, pled guilty to one count of computer fraud in December 2023 following his arrest in July. “At […]

Cyber News
  • by
  • April 13, 2024

U.S. Treasury Hamas Spokesperson for Cyber Influence Operations

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Friday announced sanctions against an official associated with Hamas for his involvement in cyber influence operations. Hudhayfa Samir ‘Abdallah al-Kahlut, 39, also known as Abu Ubaida, has served as the public spokesperson of Izz al-Din al-Qassam Brigades, the military wing of Hamas, since at […]

Cyber News
  • by
  • April 13, 2024

Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack

Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday. The network security company’s Unit 42 division is tracking the activity under the name Operation MidnightEclipse, attributing it as the work of a single […]

Cyber News
  • by
  • April 12, 2024

Friday Squid Blogging: The Awfulness of Squid Fishing Boats

The scientists learning to speak whalehttps://www.bbc.com/future/article/20240409-the-scientists-learning-to-speak-whale “In a world-first, scientists had a “conversation” with a whale. Now, researchers are trying to find out what they are actually saying. A growling “throp” noise emanates from the research vessel’s underwater speaker. A humpback breaks away from its group and approaches. The mammal circles the boat. It surfaces […]

Cyber News
  • by
  • April 12, 2024

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

“Test files” associated with the XZ Utils backdoor have made their way to a Rust crate known as liblzma-sys, new findings from Phylum reveal. liblzma-sys, which has been downloaded over 21,000 times to date, provides Rust developers with bindings to the liblzma implementation, an underlying library that is part of the XZ Utils data compression […]

Cyber News