API - API Security Blog

New Botnet Malware ‘Horabot’ Targets Spanish-Speaking Users in Latin America

[![Botnet Malware](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Spanish-speaking users in Latin America have been at the recei ...

June 02, 2023

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

[![Camaro Dragon](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() The Chinese nation-stage group known as **Camaro Dragon** has b ...

June 02, 2023

North Korea’s Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

[![Targeted Cyber Attacks](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() U.S. and South Korean intelligence agencies have issue ...

June 02, 2023

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

[![Zero-Day Vulnerability](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() A critical flaw in Progress Software's in MOVEit Trans ...

June 02, 2023

CVE-2023-34091

Kyverno is a policy engine designed for Kubernetes. In versions of Kyverno prior to 1.10.0, resources which have the `deletionTimestamp` field defined can bypass validate, generate, or mutate-existing ...

June 01, 2023

Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

[![Evasive QBot Malware](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() An analysis of the "evasive and tenacious" malware known ...

June 01, 2023

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

[![Malicious PyPI Packages](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Researchers have discovered a novel attack on the Pyt ...

June 01, 2023

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

[![WordPress](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() WordPress has issued an automatic update to address a critical flaw ...

June 01, 2023