The King of Most Common Passwords Still Sits on its Throne
NordPass has published a study with the top 200 most common passwords for 2021. The study covered 50 countries.
Articles
Everything we have published
463 articles, newest first.
FBI Email System Hacked and Sent out Fake Cyber Attack Alerts
FBI has confirmed that an unnamed actor was able to gain access to the FBI's Law Enforcement Enterprise Portal (LEEP) to send the emails to thousands of recipients about a fake cyberattack.
The Rise Of Killware
Malware that targets Operational Technology can endanger human lives. A look at the Oldsmar, Universal Health Services and Colonial Pipeline incidents and what they show about the risks of connected OT environments.
New Azure AD Bug Allows Attackers Brute-Force Passwords
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
Coinbase Users Hacked!
vulnerability in the SMS multi-factor authentication mechanism of Coinbase was used by hackers to steal funds from 6000 users
Yandex Hit by Record-Breaking Mēris DDoS Attack (2021)
Russian tech company Yandex said in September 2021 that it suffered the largest DDoS attack recorded up to that time.
Enumerate and Capture Website Files Metadata
Many organizations are uploading files on their websites like pdf, word and excel without being aware that they are exposing sensitive information. You can enumerate and capture the files and its metadata.
United Nations Breached by Hackers
Hackers breached the United Nations' computer networks earlier this year and made off with a trove of data that could be used to target agencies within the intergovernmental organization.
Microsoft Released Mitigations on Recently Discovered Attack Method
PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM
Spreading Malware Using Old Techniques. It Still Works!
Operators of the malware known as SolarMarker, are using an old technique called SEO poisoning to trick users to follow links on PDF documents stuffed with many SEO keywords and redirect them to malware.
Cool Nmap Tricks and Techniques
A list of not so commonly used but powerful Nmap commands to help you bring your enumeration skills to the next level.
IBM Announces Cybersecurity Grants for Public Schools
IBM announced that it would be introducing in-kind grants to six school districts valued at $3 million to boost cybersecurity in schools.
How much are your details worth on the dark web?
Researchers from Comparitech, a UK-based online security firm, analyzed more than 40 dark web marketplaces to see how much identities and bundles of full user
Top Threats for WordPress Sites in 2020
Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.
Apple iOS 14 Introduces “BlastDoor” to Prevent Execution of Malicious Code
Apple introduces new security mechanism to iMessage, called BlastDoor. What does it do?
Even the smartest people get hacked
Mensa UK , the "high IQ society" organization had failed to secure the data of its 18,000 members properly.
U.S. Wireless Carrier with 4.9 Million Customers Hacked
Retail store's employee were scammed into downloading software on a computer which allowed an attacker to access the computer remotely. The hacker gained access to the company's CRM records since the employee was already logged in to the system.
What is a “Zero-Day” Exploit
Understand what a zero-day exploit is and how your organization can defend against such attacks which target unknown vulnerabilities of your systems and applications.