North Korean APT’s Covert Supply-Chain Ambush

Summary: There has been a significant increase in software supply chain attacks orchestrated by North Korean hackers. Notably, the MagicLine4NX and 3CX compromises gained attention, with the Lazarus hacking group employing a sophisticated approach. They leverage a zero-day vulnerability in the...

2034, Part IV: The Spratly Islands Ambush

“In a thousand years America won’t be remembered as a country, but simply as a fleeting moment.”...

Arrow Ambush - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Arrow Ambush published at the 'play' market has multiple vulnerabilities...