A South Korean ERP vendor’s product update server was compromised and used to deliver malware instead of updates. The attack, detected by AhnLab, resembles tactics used by North Korea-linked group Andariel. The malware, named Xctdoor, can steal system information, execute commands from the attacker, and capture screenshots, keylogs, and clipboard logs. It can also transmit…
Meta’s ad-free subscription in the European Union (E.U.) has been accused by regulators of breaching competition rules, specifically the Digital Markets Act (DMA). The issue lies with Meta’s “pay or consent” model, which forces users to choose between seeing ads or paying to avoid them, failing to provide a less personalized but equivalent alternative. Read…
CocoaPods, a dependency manager used in over three million applications coded in Swift and Objective-C, has left thousands of packages exposed and ready for takeover for nearly a decade. The issue was discovered by Israeli firm EVA Information Security and affects 1,870 Pods that remained unclaimed by their owners. The problem allowed an attacker to…
IBM Consulting and Microsoft announced a strengthened collaboration to help clients simplify and modernize their security operations and manage hybrid cloud identities. The partnership combines IBM’s cybersecurity services with Microsoft’s comprehensive security technology portfolio. The joint offering provides advanced security capabilities to protect data and drive business growth. The collaboration includes: * Modernizing security operations…
LogRhythm has announced its 9th consecutive quarterly release, aimed at enhancing the output of AI tools used in cybersecurity by providing high-quality data. The company’s Machine Data Intelligence (MDI) Fabric for AI-ready Security Operations Centers (SOCs) collects and organizes diverse log sources into structured datasets. The latest enhancements aim to drive analyst efficiency, simplify compliance…
