Atul Narula (Page 39)

He is a cyber security and malware researcher. He studied Computer Science and started working as a cyber security analyst in 2006. He is actively working as an cyber security investigator. He also worked for different security companies. His everyday job includes researching about new cyber security incidents. Also he has deep level of knowledge in enterprise security implementation.

Palo Alto GlobalProtect Gateway and Protect interfaces are vulnerable to easy-to-launch network-based exploits via this vulnerability

On: November 11, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, GlobalProtect, Hacking, incidents, Information Security, Palo Alto Networks, remote code execution (RCE), security flaws, vulnerability

Palo Alto Networks security team has issued a statement alerting its customers to a remote code execution (RCE) vulnerability in GlobalProtect, mentioning that threat actors can launch malicious code withRead More →

Two critical remote code execution vulnerabilities in Apache Storm. Patch quickly

On: November 10, 2021

In: Vulnerabilities

Tagged: Apache Software Foundation, Apache Storm, Cyberattack, cybercrime, cybersecurity, GitHub Security Labs, Hacking, Information Security, Open Source, remote code execution (RCE), technology, vulnerability

The developers of Apache Storm, an open-source real time data analysis platform, announced the correction of two vulnerabilities whose exploitation would allow remote code execution (RCE) attacks to be deployed.Read More →

Hackers redirect big retailer’s website traffic to Pornhub; they offer customers free Premium subscriptions

On: November 10, 2021

In: Cyber Security

Tagged: Angling Direct, Cyberattack, cybersecurity, Hacking, incidents, Information Security, MindGeek, PornHub, Threatpost, Twitter, website security, websites

In an unprecedented development, major fishing gear company Angling Direct was the target of an unusual cyberattack that resulted in the redirection of its web domain to the popular adultRead More →

Siemens and Schneider Electric patch 90 vulnerabilities in SCADA and ICS products: TIME TO WORK FOR SYSADMINS

On: November 9, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, NUCLEUS:13, remote code execution (RCE), SCADA systems, Schneider Electric, security patches, Siemens, technology, vulnerability

This will be a busy week for system administrators, as technology companies Siemens and Schneider Electric announced the release of dozens of security patches to address all sorts of flawsRead More →

Video game hackers finally find the key to cracking PlayStation 5 system

On: November 9, 2021

In: Technology

Tagged: cybersecurity, Fail0verflow, firmware, Hacking, homebrew software, Information Security, PlayStation 5, Reverse-engineering, software, Sony, technology, videogames

This weekend, a hacking group identified as Fail0verflow claimed to have accessed the root keys for encryption of the next-generation PlayStation 5 console, which could be the first step inRead More →

How Chinese APT groups are exploiting Zoho ManageEngine vulnerabilities to spy on enterprises

On: November 9, 2021

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), hackers, Hacking, Hacking Tools, incidents, Information Security, malware, Palo Alto Networks, Unit 42, Zoho ManageEngine

In its latest investigation, Palo Alto Networks’ Unit 42 detailed how a group of unknown hackers has used a number of malicious tools to spy on enterprise networks in theRead More →

Ransomware groups attack casinos on Native American reservations

On: November 8, 2021

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Federal Bureau of Investigation (FBI), hackers, Hacking, incidents, Information Security, malware, ransomware, REvil ransomware, Ryuk ransomware

The Federal Bureau of Investigation (FBI) issued a private industry alert to notify casino owners on tribal properties about an aggressive ransomware campaign that has infected various establishments, completely cripplingRead More →

New bill allows companies to revenge from hackers by hacking them back

On: November 8, 2021

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Department of Homeland Security (DHS), hack back, hackers, Hacking, incidents, Information Security, technology, U.S. Congress, United States, US Department of Justice (DOJ)

In mid-2021, U.S. Senators Sheldon Whitehouse and Steve Daines presented a document titled “Study on Cyber-Attack Response Options Act”, as a way to request (or require) the Department of HomelandRead More →

NPM libraries with millions of downloads were poisoned with backdoor malware. Audit your web applications

On: November 5, 2021

In: Cyber Security

Tagged: Amazon, backdoor, Command-Option-Argument (coa), Cyberattack, cybersecurity, facebook, GitHub, Hacking, Information Security, malware, Microsoft, Node.js, npm, Open Source

A security report notes that Command-Option-Argument (coa), the popular npm library, has been infiltrated with a malicious backdoor code, which could have severe consequences worldwide. This library is downloaded aboutRead More →