Latest Cybersecurity News and Articles

---

New Python URL Parsing Flaw Could Enable Command Execution Attacks

A high-severity security flaw disclosed in the Python URL parsing function could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, resulting in arbitrary file reads and command execution.

---

White House Wants Input on Open Source Security, Memory-Safe Languages

The White House ONCD released a request for information to get input from public and private sector stakeholders on key issues surrounding open-source security, a critical piece of the Biden administration’s national cybersecurity strategy.

---

Do You Speak Multiple Languages? Malware Does.

The malware is packed twice to evade detection, including the use of a Go crypter called ShellGo. The malware payload is a remote access trojan (RAT) called AsyncRAT, which is executed in memory through a complex sequence of function calls.

---

DHS Cyber Review Board to Examine China-Linked Cyberattacks of Microsoft

The Department of Homeland Security's Cyber Safety Review Board will conduct its next investigation on cloud security and examine a recent cyberattack that targeted government email accounts supplied through Microsoft software.

---

Dependency Confusion Attacks: New Research Into Which Businesses are At Risk

Dependency confusion attacks, involving malicious code injection into applications through vulnerable dependencies, pose a significant security risk to organizations, with a high percentage of applications and assets being vulnerable to such attacks.

---

TunnelCrack Attack May Cause Vulnerable VPNs to Leak Traffic

A couple of techniques collectively known as TunnelCrack can, in the right circumstances, be used by snoops to force victims' network traffic to go outside their encrypted VPNs, it was demonstrated last week.

---

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill (DPDPB) after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people's information. "The Bill provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their

---

Security’s Top 5 – July 2023

In this edition of Security’s Top 5, we showcase the top stories and new developments from across the security industry throughout July.

---

PSNI bosses’ blase attitude to data leak that has put my family at risk | Letter

A serving member of Police Service Northern Ireland on the sacrifices that have been made and the lack of support from the topI’m a serving officer with the Police Service of Northern Ireland, from a nationalist background in West Belfast. I couldn’t join the RUC because it would have been too dangerous because of who I was and where I was from. Nevertheless, I took the plunge and eventually joined the PSNI. My immediate family had to be schooled with an elaborate backstory. Wider family were not told – I made my siblings lie to their children for years because I couldn’t trust who they would tell.For 18 years I’ve relied on my family to help me protect my identity. I’ve denied myself a social life, and gave up sports I loved. I can’t stay in touch with old friends on social media as I need to avoid the footprint. Now this is all taken away at the click of a button (Northern Ireland police officers’ details exposed in ‘monumental’ breach, 8 August). I am worried terrorists will target my parents because it’ll be easier than getting at me. Continue reading...

---

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

Multiple security vulnerabilities impacting CyberPower's PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe's iBoot Power Distribution Unit (PDU) could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in target environments. The nine vulnerabilities, from CVE-2023-3259 through CVE-2023-3267, carry

---

PSNI data breach: 200 officers and staff not informed about theft for month

Police-issued laptop, radio and documents stolen from car in Northern Ireland on 6 July About 200 police officers and staff were not informed about the theft of devices and documents with data potentially affecting them for almost a month, the Police Service of Northern Ireland (PSNI) has confirmed.A police-issued laptop, radio and documents were stolen on 6 July from the car which is understood to belong to a superintendent. Continue reading...

---

AI could have bigger impact on UK than Industrial Revolution, says Dowden

Deputy PM says technology may aid faster government decisions – but warns of massive hacking risksArtificial intelligence could have a more significant impact on Britain than the Industrial Revolution, the deputy prime minister has said, but warned it could be used by hackers to access sensitive information from the government.Oliver Dowden said AI could speed up productivity and perform boring aspects of jobs. Continue reading...

---

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks. "An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.'s desk phones and Zoom's Zero Touch Provisioning feature can gain full remote control of the devices,"

---

Multiple Flaws Found in the Avada WordPress Theme and Plugin

These security flaws in the widely used Avada theme and the Avada Builder plugin, uncovered by Patchstack’s security researcher Rafie Muhammad, expose a significant number of WordPress websites to potential breaches.

---

MacOS Systems Turned Into Proxy Exit Nodes by Adload

AdLoad malware is still infecting Mac systems and has been observed turning infected systems into a giant proxy botnet. AT&T Alien Labs has identified over 10,000 IPs behaving as proxy exit nodes, indicating a potentially widespread infection.

---

Honor Among Cybercriminals? Why a Canadian Firm Paid Ransom

A nonprofit firm that administers government dental programs in Canada is notifying nearly 1.5 million individuals that their data, including banking information for some, was compromised in a ransomware incident last month.

---

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe. "Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net no longer available," Europol said in a statement. "The service facilitated the

---

JanelaRAT: Repurposed BX Rat Variant Targeting LATAM FinTech

Zscaler ThreatLabz has discovered a threat actor targeting FinTech users in the LATAM region with a malware called JanelaRAT. This malware uses tactics such as DLL side-loading and dynamic C2 infrastructure.

---

New SystemBC Malware Variant Targets Southern African Power Company

An unknown threat actor has been linked to a cyber attack on a power generation company in South Africa with a new variant of the SystemBC malware called DroxiDat as a precursor to a suspected ransomware attack.

---

New Python URL Parsing Flaw Enables Command Injection Attacks

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the entire URL starts with blank characters," the CERT Coordination Center (CERT/CC) said in a Friday