Expert Analysis Reveals Cryptographic Weaknesses in Threema Messaging App

Jan 10, 2023Ravie LakshmananPrivacy / Encryption A comprehensive analysis of the cryptographic protocols used in the Swiss encrypted messaging application Threema has revealed a number of loopholes that could be exploited to break authentication protections and even recover users’ private keys. The seven attacks span three different threat models, according to ETH Zurich researchers Kenneth…

Jetstream, a Ghanaian e-logistics platform for Africa’s B2B importers and exporters, takes in $13M equity, debt • TechCrunch

The market for cross-border logistics services is said to hit revenues of $32 billion by 2025, with several companies vying for market share in the ever-growing competitive industry. Ghanaian e-logistics startup Jetstream Africa is on the list, and today, it’s announcing that it has secured $13 million in equity and debt pre-Series A financing.  Fintech…

Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL

Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments. A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security researcher at Microsoft Defender for Cloud, said in a report…