all InfoSec news
3CX Desktop Client Under Supply Chain Attack
March 30, 2023, 10:17 p.m. |
DataBreachToday.co.uk RSS Syndication www.databreachtoday.co.uk
Suspected North Korean hackers trojanized installers of a voice and video calling desktop client made by 3CX and used by major multinational companies. The vulnerability traces to a poisoned Electron software library file, an open-source framework for user interfaces.
3cx attack client companies desktop electron file framework hackers interface library major north north korean north korean hackers software supply supply chain supply chain attack traces under user interface video voice vulnerability
More from www.databreachtoday.co.uk / DataBreachToday.co.uk RSS Syndication
Jobs in InfoSec / Cybersecurity
SOC 2 Manager, Audit and Certification
@ Deloitte | US and CA Multiple Locations
Security Engineer, Infrastructure Protection
@ Google | Hyderabad, Telangana, India
Senior Security Software Engineer
@ Microsoft | London, London, United Kingdom
Consultor Ciberseguridad (Cadiz)
@ Capgemini | Cádiz, M, ES
Cyber MS MDR - Sr Associate
@ KPMG India | Bengaluru, Karnataka, India
Privacy Engineer, Google Cloud Privacy
@ Google | Pittsburgh, PA, USA; Raleigh, NC, USA