South Korea’s state-run Korea Atomic Energy Research Institute (KAERI) on Friday disclosed that its internal network was infiltrated by suspected attackers operating out of its northern counterpart. The intrusion is said to have taken place on May 14 through a vulnerability in an unnamed virtual private network (VPN) vendor and Continue Reading
network security
Cyber espionage by Chinese hackers in neighbouring nations is on the rise – Tempemail
A string of cyber espionage campaigns dating all the way back to 2014 and focused on gathering military intelligence from neighbouring countries have been linked to a Chinese military-intelligence apparatus. In a wide-ranging report published by Massachusetts-headquartered Recorded Future this week, the cybersecurity firm’s Insikt Group said it identified ties Continue Reading
Russia bans VyprVPN, Opera VPN services for not complying with blacklist request – Tempemail
Russia’s telecommunications and media regulator Roskomnadzor (RKN) on Thursday introduced restrictions on the operation of VyprVPN and Opera VPN services in the country. “In accordance with the regulation on responding to threats to circumvent restrictions on access to child pornography, suicidal, pro-narcotic and other prohibited content, restrictions on the use Continue Reading
Google Releases New Framework to Prevent Software Supply Chain Attacks – Tempemail
As software supply chain attacks emerge as a point of concern in the wake of SolarWinds and Codecov security incidents, Google is proposing a solution to ensure the integrity of software packages and prevent unauthorized modifications. Called “Supply chain Levels for Software Artifacts” (SLSA, and pronounced “salsa”), the end-to-end framework Continue Reading
[eBook] 7 Signs You Might Need a New Detection and Response Tool – Tempemail
![[eBook] 7 Signs You Might Need a New Detection and Response Tool – Tempemail](https://blog.tempemail.co/wp-content/uploads/2021/06/eBook-7-Signs-You-Might-Need-a-New-Detection-and.jpg)
It’s natural to get complacent with the status quo when things seem to be working. The familiar is comfortable, and even if something better comes along, it brings with it many unknowns. In cybersecurity, this tendency is countered by the fast pace of innovation and how quickly technology becomes obsolete, Continue Reading
Update Your Chrome Browser to Patch Yet Another 0-Day Exploited in-the-Wild – Tempemail
Google has rolled out yet another update to Chrome browser for Windows, Mac, and Linux to fix four security vulnerabilities, including one zero-day flaw that’s being exploited in the wild. Tracked as CVE-2021-30554, the high severity flaw concerns a use after free vulnerability in WebGL (aka Web Graphics Library), a Continue Reading
Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments – Tempemail
A Middle Eastern advanced persistent threat (APT) group has resurfaced after a two-month hiatus to target government institutions in the Middle East and global government entities associated with geopolitics in the region in a rash of new campaigns observed earlier this month. Sunnyvale-based enterprise security firm Proofpoint attributed the activity Continue Reading
A New Spyware is Targeting Telegram and Psiphon VPN Users in Iran – Tempemail
Threat actors with suspected ties to Iran have been found to leverage instant messaging and VPN apps like Telegram and Psiphon to install a Windows remote access trojan (RAT) capable of stealing sensitive information from targets’ devices since at least 2015. Russian cybersecurity firm Kaspersky, which pieced together the activity, Continue Reading
Strengthen Your Password Policy With GDPR Compliance – Tempemail
A solid password policy is the first line of defense for your corporate network. Protecting your systems from unauthorized users may sound easy on the surface, but it can actually be quite complicated. You have to balance password security with usability, while also following various regulatory requirements. Companies in the Continue Reading
Researchers Uncover ‘Process Ghosting’ — A New Malware Evasion Technique – Tempemail
Cybersecurity researchers have disclosed a new executable image tampering attack dubbed “Process Ghosting” that could be potentially abused by an attacker to circumvent protections and stealthily run malicious code on a Windows system. “With this technique, an attacker can write a piece of malware to disk in such a way Continue Reading