Data Security

Data Security News. Data needs to be protected from unauthorised access, modification, or deletion. This involves ensuring data is protected in …

Threat Actors Are Actively Exploiting CVE-2022-1388 RCE in F5 BIG-IP

3 min read

Threat Actors Are Actively Exploiting CVE-2022-1388 RCE in F5 BIG-IP

RiSec 10 May 2022

Threat actors are exploiting critical F5 BIG-IP flaw CVE-2022-1388 to deliver malicious code, cybersecurity researchers warn. Threat actors started massively exploiting the critical remote code execution vulnerability, tracked as CVE-2022-1388, affecting F5 BIG-IP. Last week security and application delivery solutions provider F5 released its security notification to inform customers that it has released security updates from tens of vulnerabilities in its products. The company addressed a total of 43 vulnerabilities, the most severe one is a critical issue tracked as CVE-2022-1388 (CVSS score of 9.8). An unauthenticated attacker with network access to the BIG-IP system through the management...

Hacked Websites Threat Report 2021

8 min read

Hacked Websites Threat Report 2021

RiSec 29 April 2022

Our 2021 Website Threat Research Report details our findings and analysis of emerging and ongoing trends and threats in the website security landscape. We’ve put together this analysis to help keep website owners informed and aware of the dangers posed by malicious actors. This year’s report is a collection of observations made by Sucuri’s Research and Remediation teams from data collected on web-based malware, vulnerable software, and attacks during 2021. The data used in this report is a representative sample of the total number of websites that our Remediation...

Anonymous Hacked Russian PSCB Commercial Bank and Companies In The Energy Sector

3 min read

Anonymous Hacked Russian PSCB Commercial Bank and Companies In The Energy Sector

RiSec 29 April 2022

OpRussia continues, less than a week after my last update Anonymous has hacked other Russian companies and leaked their data via DDoSecrets. The #OpRussia launched by Anonymous on Russia after the criminal invasion of Ukraine continues, the collective claims to have published more than 6 TB of Russian data via DDoSecrets. This is my update on the recent attack and associated data leaks via the DDoSecrets platform: Elektrocentromontazh is the largest the chief power organization of Russia, it designs, tests, builds, installs and maintains electrical equipment in power generation and...

Anonymous Claims Data Leak to Force Nestlé Out of Russia

3 min read

Anonymous Claims Data Leak to Force Nestlé Out of Russia

RiSec 3 April 2022

Multinational companies around the world voluntarily pulled their business out of Russia after president Vladimir Putin launched an unprovoked invasion of Ukraine, but the hacker group Anonymous is determined to give any stragglers a nudge. The hacktivist group recently leaked data, emails and passwords of food giant Nestlé’s customers and warned other companies that continued doing business in Russia that they would be next. “We call on all companies that continue to operate in Russia by paying taxes to the budget of the Kremlin’s criminal regime: Pull out of Russia!”...

TP-Link Privacy Violation: Router Sends Data To 3rd Parties Without Consent

3 min read

TP-Link Privacy Violation: Router Sends Data To 3rd Parties Without Consent

RiSec 12 March 2022

China’s network equipment manufacturer TP-Link Router is also a German antivirus software company Avira “We are developing a security service in partnership with Avira”. However, there is a report posted on Reddit on the overseas bulletin board that “TP-Link routers are sending a large amount of traffic to Avira’s server even if related services are turned off.” It has become a hot topic. Privacy Concerns, Violation of GDPR. I recently enabled a DNS gateway to be able to see requests from my router, and network devices. Was surprised to...

Cisco’s 7 Guiding Principles of Government Data Demands

3 min read

Data Security

Cisco’s 7 Guiding Principles of Government Data Demands

RiSec 1 March 2022

At Cisco, we empower our customers to control their data. Protecting the privacy, integrity, and confidentiality of data in our possession is of utmost importance. In a world of advancing cyberthreats, expanding extraterritorial legislation, and growing concerns for data localization, we understand technology companies have an outsized responsibility to ensure customers have the power to make important decisions about their data. Like all global technology companies, there are scenarios when Cisco receives demands from law enforcement, intelligence agencies, or governments requesting access to data related to an ongoing investigation....

There is a shell in your lunch-box

7 min read

There is a shell in your lunch-box

RiSec 22 February 2022

My team was recently engaged by a client (Hackme) to perform a black-box external penetration test. The objective was simple – see how susceptible the organization is from an external point of view and test the effectiveness of the security controls that are managed enterprise-wide. As such, asides, the company name, we were given “ZERO” information. The following details illustrate how we embarked upon this assessment which resulted in… OSINT 101 We kicked off with some Open Source Intelligence (OSINT) 101 :). There are quite a number of open...

3 Steps To Better Account Security

3 min read

3 Steps To Better Account Security

RiSec 21 February 2022

Best security practices are the responsibility of all developers, with the recent surges in fraudulent login attempts, it serves as a good reminder that account security is the pillar to good organizational security practices: As GitHub’s Staff Security Analyst @sanjuanswan noted during a recent security Twitter space “your organization is only as secure as your least secure member” It’s our responsibility to promote good security practices, whether you are an individual contributor or team lead. Here are three steps you can take today to set an effective model of security practices. 1....

New Android malware dubbed Xenomorph targets customers of 56 banks

3 min read

New Android malware dubbed Xenomorph targets customers of 56 banks

RiSec 21 February 2022

A New Android malware dubbed Xenomorph, served through Google Play Store has infected more than 50,000 Android devices to steal banking information. Still in early development stage, Xenomorph is targeting users of dozens of financial institutions in Spain, Portugal, Italy, and Belgium. Researchers at fraud and cybercrime prevention company ThreatFabric analyzing Xenomorph found code that is similar to Alien banking trojan. This suggests that the two threats are somehow connected: either Xenomorph is Alien’s successor or a developer has been working on both of them. Banking trojans like Xenomorph aim to steal sensitive...

ElementVape: Major e-cigarette store hacked to steal credit cards

4 min read

ElementVape: Major e-cigarette store hacked to steal credit cards

RiSec 18 February 2022

A prominent online seller of e-cigarettes and vaping kits is serving a credit card skimmer on its live site, likely after getting hacked. With its presence across the U.S. and Canada, Element Vape sells e-cigarettes, vaping devices, e-liquids, and CBD products in both retail outlets and on their online store. Vaping site pulls in JavaScript to skim credit cards Element Vape’s website is loading a malicious JavaScript file from a third-party website that appears to contain a credit card stealer. Threat actors employing such credit card stealers on eCommerce stores by injecting scripts are referred to as Magecart. Multiple...