Search results

  1. CarderPlanet

    BunnyLoader: в подполье киберпреступности возникает новая угроза "вредоносное ПО как услуга"

    Кибербезопасности эксперты обнаружили еще одно вредоносное ПО-как-услуга (Маас) угрозы под названием BunnyLoader, которые рекламируются для продажи на киберпреступностью под землей. "BunnyLoader предоставляет различные функциональные возможности, такие как загрузка и выполнение полезной...
  2. CarderPlanet

    Уязвимость Zip Slip в OpenRefine может позволить злоумышленникам выполнить вредоносный код

    В инструменте очистки и преобразования данных OpenRefine с открытым исходным кодом была обнаружена серьезная ошибка безопасности, которая может привести к выполнению произвольного кода в затронутых системах. Отслеживаемая как CVE-2023-37476 (оценка CVSS: 7,8), уязвимость представляет собой Zip...
  3. CarderPlanet

    Silent Skimmer: годичная кампания веб-скимминга, ориентированная на компании, осуществляющие онлайн-платежи

    Более года с помощью веб-скиммеров проводится финансово мотивированная кампания, ориентированная на компании, осуществляющие онлайн-платежи в Азиатско-Тихоокеанском регионе, Северной Америке и Латинской Америке. Команда BlackBerry Research and Intelligence отслеживает активность под названием...
  4. CarderPlanet

    LUCR-3: рассеянный паук получает SaaS-поддержку в облаке

    LUCR-3 пересекается с такими группами, как Scattered Spider, Oktapus, UNC3944 и STORM-0875, и является финансово мотивированным злоумышленником, который использует поставщика идентификационных данных (IDP) в качестве начального доступа к среде с целью кражи интеллектуальной собственности (IP)...
  5. CarderPlanet

    API: Раскрытие бесшумного убийцы рисков кибербезопасности во всех отраслях

    Введение В современной взаимосвязанной цифровой экосистеме интерфейсы прикладного программирования (API) играют ключевую роль в обеспечении бесперебойной связи и обмена данными между различными программными приложениями и системами. API действуют как мосты, облегчая обмен информацией и...
  6. CarderPlanet

    Researchers have created a quantum engine that works without heat using bosons and fermions

    Okinawa scientists explain how they did the impossible. A team of researchers from the Department of Quantum Systems at the Okinawa Institute of Science and Technology (OIST), together with scientists from the University of Kaiserslautern-Landau and the University of Stuttgart, created a...
  7. CarderPlanet

    Billionaires vs Apple: the secret motives behind the attack on your privacy

    So who is really behind the iPhone encryption attack? The Heat Initiative, a children's rights organization, has strongly criticized Apple for providing powerful privacy protections to its customers. The group claims that such protection measures contribute to child exploitation, as pedophiles...
  8. CarderPlanet

    British aircraft revolutionizes spy missions

    A surprisingly slow newbie has emerged who can change the rules of the espionage game. BAE Systems recently announced the successful completion of key tests of its groundbreaking reconnaissance aircraft, called the Persistent High Altitude Solar Aircraft (Phasa-35). This device stands out for...
  9. CarderPlanet

    Technologies against innocence: a virtual child lover convicted in Korea

    Can deepfake help a 40-year-old man behind bars? A man has been convicted of creating sexual images of children using AI in South Korea, the Korea Herald reports, citing local media. The man, aged in his 40s, was charged with violating the Law on the Protection of Children and Adolescents and...
  10. CarderPlanet

    Shoemaker without boots: Cloudflare DDoS protection was circumvented via Cloudflare

    The attack method can make the company's security systems less effective. Certitude specialists have identified gaps in the protection mechanisms against DDoS attacks and the Cloudflare firewall. To exploit vulnerabilities, an attacker just needs to create a free account on the Cloudflare...
  11. CarderPlanet

    Apache NiFi Bug: Hackers can control your database

    If you don't update, data theft is inevitable. Specialists of the information security company Cyfirma discovered a dangerous vulnerability of remote Code Execution (RCE) in Apache NiFi, the operation of which can lead to unauthorized access and data theft. Apache NiFi is an open source data...
  12. CarderPlanet

    Wiretapping without a microphone: Cyber spies reveal secrets through moving camera elements

    The more expensive your smartphone, the more you are at risk of information theft. Researchers have developed a technique for extracting sounds from static images captured by smartphone cameras. Moving camera parts, such as CMOS roller shutters, optical image stabilization (OIS) and autofocus...
  13. CarderPlanet

    Backlash: Snap Store introduces Manual Review to Protect Users

    Malicious code brought down automation in the Snap Store. Canonical has temporarily disabled the automatic verification system for published packages in the Snap Store due to the appearance in the repository of suspicious packages with malicious code designed to steal cryptocurrency from users...
  14. CarderPlanet

    New malware BunnyLoader: when a small rabbit brings big problems

    Key features of the new malware that is already being sold on the darknet. Cybersecurity researchers at Zscaler ThreatLabZ have discovered a new malware called BunnyLoader, which is distributed on a Malware-as-a-Service (MaaS) model and sold on underground cybercrime forums. The researchers...
  15. CarderPlanet

    The fate of the ransomware: 1032 bitcoins are sent to the Russian state budget

    The court confirmed the verdict of a corrupt investigator who extorted money from hackers. The Moscow City Court confirmed the legality of the verdict of the Nikulinsky District Court, which satisfied the requirements of the Prosecutor General's Office of the Russian Federation in relation to...
  16. CarderPlanet

    Japan's Cyber Patrol introduces AI Spy to Prevent Crimes

    Every post on the internet will be tracked by AI to help the police find criminals. The National Police Agency of Japan (NPA) has started using artificial intelligence in its cyber patrols to identify information on the network that can lead to crimes. This was reported by Japanese media...
  17. CarderPlanet

    From geopolitics to connectivity: DDoS attacks have spread all over the world

    How can global events affect your Internet speed? Various events that constantly occur around the world are often a catalyst for the growth of DDoS attacks with ideological and political motivation, researchers say. Finland suffered massive DDoS attacks in 2022, shortly after applying for NATO...
  18. CarderPlanet

    Einstein was right: The black hole in M87 is “dancing” in the rhythm of General relativity

    Researchers have experimentally confirmed the rotation of a supermassive black hole. A supermassive black hole in the galaxy M87 is showing an oscillating jet burst, confirming its rotation, according to a twenty-year study that fully matches predictions based on Einstein's general theory of...
  19. CarderPlanet

    Evil Rebranding: MetaEncryptor Returns as LostTrust

    Is it the evolution of a threat or a cry of despair? In recent months, cyberspace has faced a new threat in the form of the LostTrust cryptographer, which is believed to be a rebranding of the previously known MetaEncryptor. This conclusion was made based on the similarity of data leak sites...
  20. CarderPlanet

    OpenRefine and importing malicious code: working with data can lead to compromise

    One malicious file - and your information is in the hands of intruders. Recently, a critical vulnerability in the open data cleaning and transformation tool OpenRefine was publicly disclosed. A security flaw can lead to arbitrary code execution on affected systems. OpenRefine is a free and...
Top