Risk of getting malicious extension from Chrome store way worse than Google’s letting on, study suggests

June 23, 2024 at 06:45AM Google claims to effectively vet Chrome extensions to catch most malicious code, though researchers argue that the risk is more substantial. There has been considerable installation of risky extensions, representing a significant problem. The authors emphasize the critical need for stronger oversight by Google to address these issues. After reviewing … Read more

Android Banking Trojan Antidot Disguised as Google Play Update

May 20, 2024 at 09:29AM Cyble research identifies new Android banking Trojan “Antidot,” using overlay attacks and keylogging to harvest sensitive information. It employs WebSocket for real-time C2 communication, gaining significant control over infected devices, enabling remote control and data theft. The emerging threat emphasizes the need for improved mobile security measures and user awareness. … Read more

Improving cyber defense with open source SIEM and XDR

May 15, 2024 at 01:16PM A cyber defense strategy is crucial for preventing, detecting, and responding to cyber attacks, mitigating financial loss, reputational damage, and legal repercussions. It involves risk assessment, technology selection, integration, incident response planning, continuous monitoring, and user awareness. Integrating Wazuh, a free, open source security solution, enhances threat detection, incident response, … Read more