What It Takes to Tackle Your SaaS Security

What It Takes to Tackle Your SaaS Security,

It’s not a new concept that Office 365, Salesforce, Slack, Google Workspace or Zoom, etc., are amazing for enabling the hybrid workforce and hyper-productivity in businesses today. However, there are three main challenges that have arisen stemming from this evolution: (1) While SaaS apps include a host of native security settings, they need to be hardened by the security team of the organization

,

It’s not a new concept that Office 365, Salesforce, Slack, Google Workspace or Zoom, etc., are amazing for enabling the hybrid workforce and hyper-productivity in businesses today. However, there are three main challenges that have arisen stemming from this evolution: (1) While SaaS apps include a host of native security settings, they need to be hardened by the security team of the organization

, ,
https://thehackernews.com/2022/07/what-it-takes-to-tackle-your-saas.html

Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity

Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity,

The $540 million hack of Axie Infinity’s Ronin Bridge in late March 2022 was the consequence of one of its former employees getting tricked by a fraudulent job offer on LinkedIn, it has emerged. 
According to a report from The Block published last week citing two people familiar with the matter, a senior engineer at the company was duped into applying for a job at a non-existent company, causing

,

The $540 million hack of Axie Infinity’s Ronin Bridge in late March 2022 was the consequence of one of its former employees getting tricked by a fraudulent job offer on LinkedIn, it has emerged. 
According to a report from The Block published last week citing two people familiar with the matter, a senior engineer at the company was duped into applying for a job at a non-existent company, causing

, ,
https://thehackernews.com/2022/07/hackers-used-fake-job-offer-to-hack-and.html

PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects

PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects,

The maintainers of the official third-party software repository for Python have begun imposing a new two-factor authentication (2FA) condition for projects deemed « critical. »
« We’ve begun rolling out a 2FA requirement: soon, maintainers of critical projects must have 2FA enabled to publish, update, or modify them, » Python Package Index (PyPI) said in a tweet last week.
« Any maintainer of a

,

The maintainers of the official third-party software repository for Python have begun imposing a new two-factor authentication (2FA) condition for projects deemed « critical. »
« We’ve begun rolling out a 2FA requirement: soon, maintainers of critical projects must have 2FA enabled to publish, update, or modify them, » Python Package Index (PyPI) said in a tweet last week.
« Any maintainer of a

, ,
https://thehackernews.com/2022/07/pypi-repository-makes-2af-security.html

Hackers Exploiting Follina Bug to Deploy Rozena Backdoor

Hackers Exploiting Follina Bug to Deploy Rozena Backdoor,

A newly observed phishing campaign is leveraging the recently disclosed Follina security vulnerability to distribute a previously undocumented backdoor on Windows systems.
« Rozena is a backdoor malware that is capable of injecting a remote shell connection back to the attacker’s machine, » Fortinet FortiGuard Labs researcher Cara Lin said in a report this week.
Tracked as CVE-2022-30190, the

,

A newly observed phishing campaign is leveraging the recently disclosed Follina security vulnerability to distribute a previously undocumented backdoor on Windows systems.
« Rozena is a backdoor malware that is capable of injecting a remote shell connection back to the attacker’s machine, » Fortinet FortiGuard Labs researcher Cara Lin said in a report this week.
Tracked as CVE-2022-30190, the

, ,
https://thehackernews.com/2022/07/hackers-exploiting-follina-bug-to.html

Researchers Warn of Raspberry Robin’s Worm Targeting Windows Users

Researchers Warn of Raspberry Robin’s Worm Targeting Windows Users

,

Cybersecurity researchers are drawing attention to an ongoing wave of attacks linked to a threat cluster tracked as Raspberry Robin that’s behind a Windows malware with worm-like capabilities. 
Describing it as a « persistent » and « spreading » threat, Cybereason said it observed a number of victims in Europe.
The infections involve a worm that propagates over removable USB devices containing

,

Cybersecurity researchers are drawing attention to an ongoing wave of attacks linked to a threat cluster tracked as Raspberry Robin that’s behind a Windows malware with worm-like capabilities. 
Describing it as a « persistent » and « spreading » threat, Cybereason said it observed a number of victims in Europe.
The infections involve a worm that propagates over removable USB devices containing

, ,
https://thehackernews.com/2022/07/researchers-warn-of-raspberry-robins.html

Researchers Detail Techniques LockBit Ransomware Using to Infect its Targets

Researchers Detail Techniques LockBit Ransomware Using to Infect its Targets,

LockBit ransomware attacks are constantly evolving by making use of a wide range of techniques to infect targets while also taking steps to disable endpoint security solutions.
« The affiliates that use LockBit’s services conduct their attacks according to their preference and use different tools and techniques to achieve their goal, » Cybereason security analysts Loïc Castel and Gal Romano said.

,

LockBit ransomware attacks are constantly evolving by making use of a wide range of techniques to infect targets while also taking steps to disable endpoint security solutions.
« The affiliates that use LockBit’s services conduct their attacks according to their preference and use different tools and techniques to achieve their goal, » Cybereason security analysts Loïc Castel and Gal Romano said.

, ,
https://thehackernews.com/2022/07/researchers-detail-techniques-lockbit.html

Microsoft Quietly Rolls Back Plan to Block Office VBA Macros by Default

Microsoft Quietly Rolls Back Plan to Block Office VBA Macros by Default,

Five months after announcing plans to disable Visual Basic for Applications (VBA) macros by default in the Office productivity suite, Microsoft appears to have rolled back its plans.
« Based on feedback received, a rollback has started, » Microsoft employee Angela Robertson said in a July 6 comment. « An update about the rollback is in progress. I apologize for any inconvenience of the rollback

,

Five months after announcing plans to disable Visual Basic for Applications (VBA) macros by default in the Office productivity suite, Microsoft appears to have rolled back its plans.
« Based on feedback received, a rollback has started, » Microsoft employee Angela Robertson said in a July 6 comment. « An update about the rollback is in progress. I apologize for any inconvenience of the rollback

, ,
https://thehackernews.com/2022/07/microsoft-quietly-rolls-back-plan-to.html

Why Developers Hate Changing Language Versions

Why Developers Hate Changing Language Versions,

Progress powers technology forward. But progress also has a cost: by adding new capabilities and features, the developer community is constantly adjusting the building blocks. That includes the fundamental languages used to code technology solutions.
When the building blocks change, the code behind the technology solution must change too. It’s a challenging and time-consuming exercise that

,

Progress powers technology forward. But progress also has a cost: by adding new capabilities and features, the developer community is constantly adjusting the building blocks. That includes the fundamental languages used to code technology solutions.
When the building blocks change, the code behind the technology solution must change too. It’s a challenging and time-consuming exercise that

, ,
https://thehackernews.com/2022/07/why-developers-hate-changing-language.html

Experts Uncover 350 Browser Extension Variants Used in ABCsoup Adware Campaign

Experts Uncover 350 Browser Extension Variants Used in ABCsoup Adware Campaign,

A malicious browser extension with 350 variants is masquerading as a Google Translate add-on as part of an adware campaign targeting Russian users of Google Chrome, Opera, and Mozilla Firefox browsers.
Mobile security firm Zimperium dubbed the malware family ABCsoup, stating the « extensions are installed onto a victim’s machine via a Windows-based executable, bypassing most endpoint security

,

A malicious browser extension with 350 variants is masquerading as a Google Translate add-on as part of an adware campaign targeting Russian users of Google Chrome, Opera, and Mozilla Firefox browsers.
Mobile security firm Zimperium dubbed the malware family ABCsoup, stating the « extensions are installed onto a victim’s machine via a Windows-based executable, bypassing most endpoint security

, ,
https://thehackernews.com/2022/07/experts-uncover-350-browser-extension.html

TrickBot Gang Shifted its Focus on « Systematically » Targeting Ukraine

TrickBot Gang Shifted its Focus on « Systematically » Targeting Ukraine

,

In what’s being described as an « unprecedented » twist, the operators of the TrickBot malware have resorted to systematically targeting Ukraine since the onset of the war in late February 2022.
The group is believed to have orchestrated at least six phishing campaigns aimed at targets that align with Russian state interests, with the emails acting as lures for delivering malicious software such

,

In what’s being described as an « unprecedented » twist, the operators of the TrickBot malware have resorted to systematically targeting Ukraine since the onset of the war in late February 2022.
The group is believed to have orchestrated at least six phishing campaigns aimed at targets that align with Russian state interests, with the emails acting as lures for delivering malicious software such

, ,
https://thehackernews.com/2022/07/trickbot-malware-shifted-its-focus-on.html