KeePass exploit helps retrieve cleartext master password, fix coming soon


The popular KeePass password manager is vulnerable to extracting the master password from the application's memory, allowing attackers who compromise a device to retrieve the password even with the database is locked. [...]


https://www.bleepingcomputer.com/news/se...ming-soon/

Cybercrime gang pre-infects millions of Android devices with malware

A cybercriminal tracked as the "Lemon Group" has been infecting millions of Android-based smartphones, watches, TVs, and TV boxes, with a malware strain named 'Guerilla.' [...]


https://www.bleepingcomputer.com/news/se...h-malware/

Microsoft Azure VMs Hijacked in Cloud Cyberattack

Cybercrime group that often uses smishing for initial access bypassed traditional OS targeting and evasion techniques to directly gain access to the cloud.

https://www.darkreading.com/cloud/micros...yberattack

10 Types of AI Attacks CISOs Should Track

Risk from artificial intelligence vectors presents a growing concern among security professionals in 2023.

https://www.darkreading.com/threat-intel...ould-track

Trojan-Rigged Phishing Attacks Pepper China-Taiwan Conflict

Plug X and other information-stealing remote-access Trojans are among the malware targeting networking, manufacturing, and logistics companies in Taiwan.

https://www.darkreading.com/endpoint/tro...n-conflict

KeePass Vulnerability Imperils Master Passwords

A newly discovered bug in the open source password manager, if exploited, lets attackers retrieve a target's master password — and proof-of-concept code is available.

https://www.darkreading.com/application-...-passwords

Talking Security Strategy: Cybersecurity Has a Seat at the Boardroom Table

Pending new SEC rules reinforce how integral cybersecurity is to modern business operations, and will help close the gap between security teams and those making policy decisions.

https://www.darkreading.com/vulnerabilit...room-table

Microsoft Teams Features Amp Up Orgs' Cyberattack Exposure

It's as they say: Teams is only as strong as its weakest links. Microsoft's collaboration platform offers Tabs, Meetings, and Messages functions, and they all can be exploited.

https://www.darkreading.com/remote-workf...k-exposure

Apple Boots a Half-Million Developers From Official App Store

The mobile phone and MacBook giant also rejected nearly 1.7 million app submissions last year in an effort to root out malware and fraud.

https://www.darkreading.com/cloud/apple-...-app-store

Rebinding Attacks Persist With Spotty Browser Defenses

DNS rebinding attacks are not often seen in the wild, which is one reason that browser makers have taken a slower approach to adopting the web security standard.

https://www.darkreading.com/dr-tech/rebi...r-defenses