Decoding the TA453 Threat: Unleashing Advanced Malware Campaigns Targeting Windows and macOS
TA453, a sophisticated nation-state actor, has been identified as an entity closely associated with various other notorious groups such as Charming Kitten,
Articles
News
433 articles, newest first.
The Internet of Medical Things and Cybersecurity Risk
The healthcare and life sciences industry continues to be plagued by cybersecurity threats.1 According to FTI Consulting's U.S. Healthcare & Life Sciences
Critical Flaw in Fortinet Firewalls Exposes SSL VPN Interfaces: Over 490,000 Devices Vulnerable
A recent report reveals a critical flaw in Fortinet firewalls, leaving over 490,000 devices at risk of exploitation. This article explores the vulnerability,
Unmasking SmugX: Chinese Hackers Deploy Stealthy HTML Smuggling Techniques in Europe
A sophisticated Chinese nation-state group has been identified employing HTML smuggling techniques to target Foreign Affairs ministries and embassies in
White Snake Stealer: A Formidable Info Stealer Targeting Windows and Linux Platforms
White Snake Stealer, an advanced information stealer, has recently evolved with enhanced features, making it capable of targeting both Windows and Linux
The Pros and Cons of Virtual Chief Information Security Officers (vCISOs)
An increasing number of modern security-conscious companies have Chief Information Security Officers (CISOs) on their payroll to manage the growing threat of
Avast released a free decryptor for the Akira ransomware that can allow victims to recover their data without paying the ransom
Avast, the renowned cybersecurity firm, has released a free decryptor for the Akira ransomware. This decryptor enables victims to recover their encrypted data
Half of EDR Tools, Organizations Vulnerable to Clop Ransomware, Research Says
In recent assessments conducted by cybersecurity company Cymulate, it was revealed that nearly half of the endpoint detection and response (EDR) tools and
MITRE Releases Annual List of Top 25 Most Dangerous Software Weaknesses for 2023
MITRE has recently released its annual list of the top 25 most dangerous software weaknesses for the year 2023.
More Major Corporations Added to the Growing MOVEit Victim List
The recent MOVEit breach that has impacted two major energy corporations and numerous organizations. Discover the details of the hacking campaign, the vulnerability exploited, and the potential consequences for affected entities. Stay informed about the latest developments in cybersecurity and sa…
Nessus Plugin Vulnerability May ALlow Attackers Escalate The Privileges
Nessus is a powerful vulnerability scanning tool developed by Tenable. With its comprehensive range of plugins, it provides organizations with the ability to
Cryptojacking Campaign Exploiting Linux and IoT Devices
Microsoft researchers have identified a series of attacks that employ brute force techniques to gain unauthorized access to systems, enabling illicit
Mayor Candidate Sues Latitude for Negligence in Safeguarding Customer Data
Shahriar Sean Saffari, an unsuccessful mayoral candidate in Australia, has initiated legal proceedings against a prominent financial services firm, accusing
Microsoft Exposes Rampant Credential-Stealing Attacks by Russian Hackers
Microsoft has recently revealed a significant spike in credential-stealing attacks orchestrated by Midnight Blizzard, a Russian state-affiliated hacker group.
One of the Most Popular Open-Source Systems for Analytics and Visualization, Grafana, Faces Security Flaw
Grafana, a widely used open-source platform for analytics and visualization, has recently been discovered to have a security vulnerability. This system caters
Over 33% of Employees are Clicking Malicious Links According to Phishing Report
In recent years, the frequency and impact of data breaches have been on the rise. Organizations worldwide have suffered significant losses due to ransomware
The Internet Systems Consortium (ISC) Addressed Three Denial-of-Service (DoS) Vulnerabilities in the DNS Software Suite BIND
The Internet Systems Consortium (ISC) recently announced the release of security updates for the DNS software suite BIND, addressing three critical
List of MOVEit Victim Organizations
The risk analysis firm Kroll discovered a significant Zero Day vulnerability by the end of May 2023. The subsequent attack on MOVEit software, a business unit