Security News
PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects
The maintainers of the official third-party software repository for Python have begun imposing a new two-factor authentication (2FA) condition for projects deemed "critical." "We've begun rolling out a 2FA requirement: soon, maintainers of critical projects must have 2FA...
The Hacker News
11 Jul 2022 865 Views
CEO charged with sale of counterfeit Cisco devices to govt, health orgs
Onur Aksoy, the CEO of a group of dozens of companies, was indicted for allegedly selling more than $1 billion worth of counterfeit Cisco network equipment to customers worldwide, including health, military, and government organizations. [...]
Bleepingcomputer
9 Jul 2022 1160 Views
Fake copyright complaints push IcedID malware using Yandex Forms
Website owners are being targeted with fake copyright infringement complaints that utilize Yandex Forms to distribute the IcedID banking malware.
Bleepingcomputer
8 Jul 2022 1035 Views
QNAP warns of new Checkmate ransomware targeting NAS devices
Network-attached storage (NAS) vendor QNAP warned customers to secure their devices against attacks using Checkmate ransomware to encrypt data.
Bleepingcomputer
8 Jul 2022 1033 Views
New RedAlert Ransomware targets Windows, Linux VMware ESXi servers
A new ransomware operation called RedAlert, or N13V, encrypts both Windows and Linux VMWare ESXi servers in attacks on corporate networks. [...]
Bleepingcomputer
7 Jul 2022 931 Views
AstraLocker ransomware shuts down and releases decryptors
The threat actor behind the lesser-known AstraLocker ransomware told BleepingComputer they're shutting down the operation and plan to switch to cryptojacking. [...]
Bleepingcomputer
5 Jul 2022 897 Views
Django fixes SQL Injection vulnerability in new releases
Django, an open source Python-based web framework has patched a high severity vulnerability in its latest releases.
Tracked as CVE-2022-34265, the potential SQL Injection vulnerability impacts Django's main branch, and versions 4.1...
Bleepingcomputer
4 Jul 2022 832 Views
Free smartphone stalkerware detection tool gets dedicated hub
Kaspersky has launched a new information hub to help with their open-source stalkerware detection tool named TinyCheck, created in 2019 to help people detect if their devices are being monitored. [...]
Bleepingcomputer
4 Jul 2022 1094 Views
Hacker claims to have stolen data on 1 billion Chinese citizens
An anonymous threat actor is selling several databases they claim to contain more than 22 terabytes of stolen information on roughly 1 billion Chinese citizens for 10 bitcoins (approximately $195,000). [...]
Bleepingcomputer
4 Jul 2022 799 Views
Microsoft Defender adds network protection for Android, iOS devices
Microsoft has introduced a new Microsoft Defender for Endpoint (MDE) feature in public preview to help organizations detect weaknesses affecting Android and iOS devices in their enterprise networks. [...]
Bleepingcomputer
4 Jul 2022 1213 Views
