Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

The Pakistan-based advanced persistent threat (APT) actor known as Transparent Tribe used a two-factor authentication (2FA) tool used by Indian government agencies as a ruse to deliver a new Linux backdoor called Poseidon.
"Poseidon is a second-stage payload malware associated with Transparent Tribe," Uptycs security researcher Tejaswini Sandapolla said in a technical report published this week.

https://thehackernews.com/2023/04/pakist...lware.html

Google Chrome Hit by Second Zero-Day Attack - Urgent Patch Update Released

Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser.
The flaw, tracked as CVE-2023-2136, is described as a case of integer overflow in Skia, an open source 2D graphics library. Clément Lecigne of Google's Threat Analysis Group (TAG) has been credited with discovering and reporting the flaw on April 12, 2023.
"

https://thehackernews.com/2023/04/google...o-day.html

The Road to Remote Rev: Unlocking 59 Years of Mustang Innovation Through the Key

From double sided keys to a fob that revs the engine, see the history of the car key through nearly six decades of the Ford Mustang.


https://media.ford.com/content/fordmedia...ation.html

Toyota concepts preview new crossover, SUV for bZ EV lineup

<p>Toyota is evaluating whether to bring the bZ Sport Crossover Concept and the bZ FlexSpace Concept SUV to Europe.</p>

https://www.autonews.com/shanghai-auto-s...z-concepts

How CISOs Can Craft Better Narratives for the Board

Communicating cyber-risk upward to the C-suite and board takes simplification and a better understanding of the audience.

https://www.darkreading.com/edge-article...-the-board

Researchers Discover First Ever Major Ransomware Targeting macOS

In targeting Apple users, LockBit is going where no major ransomware gang has gone before. But it's a warning shot, and Mac users need not worry yet.

https://www.darkreading.com/remote-workf...ting-macos

QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

The infamous Trojan's operators are switching up tactics with the use of simulated business correspondence, which helps instill trust with intended victims, and a stealthier payload.

https://www.darkreading.com/remote-workf...-wsf-combo

'Zaraza' Bot Targets Google Chrome to Extract Login Credentials

The data-stealing malware threatens the cyber safety of individual and organizational privacy by infecting a range of Web browsers.

https://www.darkreading.com/remote-workf...redentials

NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

An investigation concludes that NSO Group was hired in 2022 to deploy Pegasus spyware against human rights workers in Mexico and other targets.

https://www.darkreading.com/attacks-brea...k-exploits

Marlinspike Adds Charles Carmakal to its Advisory Board



https://www.darkreading.com/operations/m...sory-board