Author: Admin

The threat actors known as FIN11 (and Clop) may have impersonated web download pages of the Zoom Application to conduct phishing campaigns against targets worldwide. The news comes from cybersecurity company Cyfirma, which published a new advisory about the threat on Wednesday. “This threat actor is known for conducting a large–scale campaign using impersonated web applications,” reads the technical blog post. “In this case, FIN11 was observed employing Zoom download pages to install an information…

Fifteen-year-old N-day Python tarfile module vulnerability puts software supply chain under the microscope. Image: maciek905/Adobe Stock Cybersecurity company Trellix announced Wednesday that a known Python vulnerability puts 350,000 open-source projects and the applications that use them at risk of device take over or malicious code execution. All applications that use the Python tarfile module are potentially at risk. SEE: Hiring kit: Python developer (TechRepublic Premium) The Python tarfile module, which is the default module installed…

By Harry Turner, Freelance Writer Cyber scams seem to become more and more common and are something that you will hear on the news a lot. Furthermore, it isn’t just the average citizen that gets scammed. Additionally, there are thousands of businesses that get scammed each day. Internet fraud is very standard and something that everybody should be aware of. It is easy to become a victim of internet fraud although those from the older…

Image: Ralf/Adobe Stock From software signing, to container images, to a new Linux distro, an emerging OSS stack is giving developers guardrails for managing the integrity of build systems and software artifacts. SolarWinds and Log4j were the five alarm fires that woke the industry up to the  insecurity of our software artifacts and build systems — the so-called “software supply chain security” problem. But it’s been a murky landscape to navigate for the developers and…