Atul Narula (Page 17)

He is a cyber security and malware researcher. He studied Computer Science and started working as a cyber security analyst in 2006. He is actively working as an cyber security investigator. He also worked for different security companies. His everyday job includes researching about new cyber security incidents. Also he has deep level of knowledge in enterprise security implementation.

Npm factory is very risky to use as hundreds more packages with backdoor found

On: March 28, 2022

In: Cyber Security

Tagged: backdoor, Cyberattack, cybercrime, cybersecurity, hackers, Hacking, incidents, Information Security, Interactsh, JFrog, malware, Microsoft Azure, Node Package Manager (npm), Security breach, security flaws

JFrog cybersecurity specialists are investigating a wave of malicious Node Package Manager (npm) packages deployed by an unidentified threat actor. This threat was first detected on March 21, with 200Read More →

8 critical Vulnerabilities in Western Digital My Cloud OS 5 pose a serious risk to your data backups

On: March 28, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, data security, Hacking, Information Security, My Cloud OS 5, security flaws, technology, vulnerability, Western Digital

Cybersecurity specialists report the detection of two critical vulnerabilities in Western Digital My Cloud OS 5, a solution for creating backups and managing large volumes of content from multiple computersRead More →

Critical vulnerability in Mitmproxy, an open source HTTPS proxy service

On: March 25, 2022

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, GitHub, Hacking, incidents, Information Security, Mitmproxy, request smuggling, Security breach, security flaws, vulnerability

Open source interactive HTTPS proxy service Mitmproxy announced the fix of a dangerous vulnerability that would have allowed threat actors to deploy HTTP request smuggling attacks against backend servers. TheseRead More →

Buffer overflow vulnerability in Sonicwall SonicOS affects different products: Patch immediately

On: March 25, 2022

In: Vulnerabilities

Tagged: arbitrary code execution, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, Information Security, SonicOS, SonicWall, vulnerability

Cybersecurity specialists report the detection of a critical vulnerability in SonicOS, the operating system executed in the physical and virtual firewalls developed by the technology firm SonicWall. According to theRead More →

These three critical vulnerabilities in NumPy, an important Python library, affect your web applications?

On: March 24, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, NumPy, Python, security flaws, technology, vulnerability

Cybersecurity specialists report the detection of some critical vulnerabilities in NumPy, a library for the Python programming language with support for creating vectors and multidimensional arrays, along with a largeRead More →

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

On: March 24, 2022

In: Vulnerabilities

Tagged: antivirus, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, incidents, Information Security, security flaws, sophos, SQL injections, Universal Threat Manager (UTM), vulnerability

Sophos security teams announced the fix of a critical vulnerability in authentication software running on Universal Threat Manager (UTM) devices. The vulnerability was described as a SQL injection bug inRead More →

How to use Leakix, the new search engine for cybersecurity professionals that makes it easier to detect vulnerable devices

On: March 23, 2022

In: Tutorials

Tagged: Cyber Security

Search engines such as Shodan, Censys or Zoomeye are very useful for specialists in ethical hacking, since they allow detecting vulnerable services, exposed devices and other security risks. However, manyRead More →

Email data of Russia-based Transneft, the largest oil pipeline company in the world, was hacked and leaked

On: March 22, 2022

In: Vulnerabilities

Tagged: Anonymous, Cyberattack, cybercrime, cybersecurity, cyberwarfare, Distributed Denial of Secrets (DDoSecrets), hackers, Hacking, hacktivism, incidents, Information Security, Russia, security flaws, Transneft, Ukraine, Vladimir Putin

Hacking groups keep playing a key role in the conflict between Ukraine and Russia almost a month after the start of the military invasion ordered by the government of VladimirRead More →

Microsoft Bing and Cortana source code is leaked by famous hacker group

On: March 22, 2022

In: Cyber Security

Tagged: Bing, Cortana, Cyberattack, cybercrime, cybersecurity, data breach, data leaking, hackers, Hacking, Information Security, Lapsus$, Mercadolibre, Microsoft, Nvidia, Samsung, Security breach, Source Code, Telegram

Lapsus$ hackers claim to have compromised the internal servers of Microsoft Azure DevOps to steal the source code of the firm’s projects such as Bing, Cortana and others. In aRead More →