Distributed Workforce

Armorblox researchers claim to have thwarted a social engineering email attack that could have compromised more than 100,000 users.

Researchers say security teams have to always look for shifting tactics – in this case Truebot moved to an old tactic: dropping malware on USB drives.

Legitimate Android applications could be compromised with malware without the knowledge of their users who could still enjoy the apps' complete functionality using the Zombinder darknet platform, which adds an obfuscated malware loader to the application code, according to BleepingComputer.

Palo Alto Networks, Amazon Web Services, Cloudflare, Imperva, and F5 web application firewalls could be bypassed through a novel attack exploiting the JSON data sharing format, SecurityWeek reports.

New cybersecurity features are set to be released by Apple in a bid to strengthen data protection amid increasing threats, with Advanced Data Protection expected to be released as part of an iCloud update by the end of the year, with global rollout poised to begin in 2023, SiliconAngle reports.

Organizations in Europe and the Asia Pacific are being targeted by Chinese state-sponsored hacking group Mustang Panda, also known as Earth Preta, HoneyMyte, Bronze President, Red Lich, and RedDelta with phishing lures related to the ongoing war between Russia and Ukraine, The Hacker News reports.

Trustwave reports that SMS-based BEC attacks are similar to the ones on email, where the bad guys impersonate company executives.

Linux devices are being hacked in Bring Your Own Filesystem attacks exploiting the open-source Linux PRoot utility, BleepingComputer reports.