Sly Uduosa

Sylvester Uduosa who goes by the nickname 'Sly' is a Legal Practitioner, Certified Ethical Hacker and Python Programmer.

Malicious Web Domain Used By Chinese Hackers Seized by Microsoft

Microsoft has announced the seizure of 42 domains used by Nickel a China-based cyber espionage group which has its sights on organizations in the U.S. and 28 other countries. Nickel has targeted organizations in both private and public sectors including diplomatic organizations and ministries of foreign affairs in North America, Central America, South America, Europe […]

Malicious Web Domain Used By Chinese Hackers Seized by Microsoft Read More »

Researchers Discover Payment Data Stealing Malware Hiding in Nginx Process

A new form of malware hits E-commerce platforms in the U.S., Germany and France this malware is said to be targeting Nginx servers in an attempt to masquerade its presence and slip past detection by security solutions. Sansec Threat Research team have stated in a recent report that “this novel code injects itself into a

Researchers Discover Payment Data Stealing Malware Hiding in Nginx Process Read More »

Researchers Detail Novel Malicious Frameworks Attacking Air-Gapped Networks

Air-gapped networks have been discovered to be attacked by four different malicious frameworks bringing the total number of such toolkits to 17 and offering adversaries a pathway to cyber espionage and exfiltrate classified information. Researchers have stated that the frameworks were designed to perform some form of espionage and they all used USB drives as

Researchers Detail Novel Malicious Frameworks Attacking Air-Gapped Networks Read More »

Twitter Reviews Privacy Policy: Bans Non-Consensual Sharing Of Private Media

Twitter recently expanded its private information policy to include private media, thus prohibiting the sharing of photos and videos without express permission from the individuals depicted in them and this is aimed at curbing doxxing and harassment. The company’s Safety team said in a tweet “Beginning today, we will not allow the sharing of private

Twitter Reviews Privacy Policy: Bans Non-Consensual Sharing Of Private Media Read More »

Microsoft Windows OS Gets Affected by Unpatched Unauthorized File Read Vulnerability

The Windows Security Vulnerability (CVE-2021-24084) which allows disclosure and Local Privilege Escalation (LPE) on vulnerable systems has received a follow up patch after the last patch failed to solve the problem. But as observed by Naceri in June 2021, not only could the patch be bypassed to achieve the same objective, the researcher this month

Microsoft Windows OS Gets Affected by Unpatched Unauthorized File Read Vulnerability Read More »

Hackers Attack Panasonic Leaving Possibilities Of A Large Data Breach

Panasonic has disclosed a security breach wherein unauthorized third-party broke into its network and accessed data from its file servers. Panasonic in a short statement published on November 26 had stated that “As the result of an internal investigation, it was determined that some data on a file server had been accessed during the intrusion,”.

Hackers Attack Panasonic Leaving Possibilities Of A Large Data Breach Read More »

GoDaddy Suffers Massive Data Breach of 1 Million WordPress Customers Data

GoDaddy on Monday suffered a data breach which resulted in the unauthorized access of data belonging to 1.2 million active and inactive customers which makes this the third security incident to happen since 2018. It stated in its filing to U.S. Securities and Exchange Commision (SEC) that a malicious third-party gained access to its Managed

GoDaddy Suffers Massive Data Breach of 1 Million WordPress Customers Data Read More »

Hackers Making Attempt At Exploiting New Windows Installer Zero-Day Vulnerability

Hackers are putting in efforts to exploit a recently disclosed privilege escalation vulnerability in order to execute arbitrary codes on fully-patched systems. Tracked as CVE-2021-42379 the elevation of privilege flaw affects Windows Installer software component and was originally resolved as part of Microsoft’s Patch Tuesday updates for November 2021. Researchers have indicated that it was

Hackers Making Attempt At Exploiting New Windows Installer Zero-Day Vulnerability Read More »

Credential Theft Campaign Linked To North Korean Hackers

Enterprise security firm Proofpoint has linked TA406, a North Korean threat actor to a wave of credential theft campaigns targeting research, education and government with two of the attacks aimed at distributing malware which could be used for intelligence gathering. TA406 also known as Kimsuky came into operations as early as 2012 emerging as one

Credential Theft Campaign Linked To North Korean Hackers Read More »

RedCurl The Corporate Espionage Hacker Group Returns

After a seven month hiatus, the Russian-speaking cyber-espionage group RedCurl returns. With their arrival on the scene, the group has targeted 4 companies including a large retail store in Russia as well as improving on its toolset in an attempt to thwart analysis and antivirus detection. The group became active in November 2018 with attacks

RedCurl The Corporate Espionage Hacker Group Returns Read More »