hacking - Security World Trend Now

Rising security concerns as hackers leverage an old-school weapon: the ‘Shift’ key to exploit npm packages

Morgan Sarah2 years ago05 mins

Exploiting typos with malicious intent: npm’s vulnerability Recently published research from Checkmarx has shed light on a long-standing vulnerability in npm, the package manager for the JavaScript programming language. Since 2017, malicious actors have been able to use typosquatting to mimic legitimate npm packages by subtly changing the capitalisation of letters in their titles. npm’s…

“North Korean Hackers Circumvent Macro-Blocking Using LNK Tactic”

Patel Maya2 years ago05 mins

North Korean Threat Group APT37 Adopts LNK Tactic for Malware Delivery North Korean cyber threat group, APT37, has adapted their malware delivery tactics to utilize LNK files, commonly known as shortcut files, in response to Microsoft’s blocking of macros by default since 2022. Check Point Research, which has been tracking APT37, reported seeing the group…