Confluence Vulnerabilities Under Active Ransomware Exploitation
The findings from Rapid7's recent study regarding the targeting of vulnerabilities in Atlassian Confluence Servers by multiple ransomware groups are
Articles
Everything we have published
468 articles, newest first.
Marina Bay Sands Casino Resort Confirms Data Security Breach
Singapore's Marina Bay Sands, a renowned casino resort, has unfortunately fallen victim to a data security breach, impacting an estimated 665,000 non-casino
North Korea-Linked Lazarus Group Deploys New Malware Targeting Blockchain Engineers
The North Korea-linked Lazarus APT group has been observed employing a novel weapon in their arsenal - the KandyKorn macOS malware. This insidious tool has
Study Reveals: People, Process and Technology Challenges Limit Organizations’ Ability to Prevent Attacks
Tenable, the Exposure Management company, recently unveiled a comprehensive study that unveils the obstacles faced by cybersecurity and IT leaders as they
Ukrainian Hackers Disrupt Russian Internet Services
Ukrainian hackers, known as the IT Army, executed a significant DDoS attack, disrupting Russian internet services in occupied territories. This article explores the attack's impact, recovery efforts, and the broader implications.
Why NIST included “Governance” in its CSF 2.0
The National Institute of Standards and Technology (NIST) has been at the forefront of promoting cybersecurity best practices and standards. One of its most
Understanding Privilege Escalation in Information Security
Privilege escalation is one of the core concepts of information security. It refers to the type of attack where a user gains higher levels of access over
Microsoft Sheds Light On The “Octo Tempest” Threat Actor
In a recent release, Microsoft has provided an extensive analysis of a relatively obscure yet highly dangerous threat actor.
Experts released PoC exploit code for VMware Aria Operations for Logs flaw
VMware has become aware of a potentially critical security concern surrounding VMware Aria Operations for Logs, formerly known as vRealize Log Insight. A
Norway on High Alert as Cisco Zero-Days Compromise ‘Important Businesses’
In a recent security development, Norway's National Security Authority (NSM) issued a stark warning regarding the exploitation of two Cisco vulnerabilities,
University of Michigan Data Breach: An In-Depth Analysis
The University of Michigan has recently confirmed a significant data breach that came to light in August 2023. This breach had far-reaching consequences and
1Password’s Response to the Okta Breach
Recently, 1Password, a popular password management solution detected suspicious activity on its Okta instance on September 29. This event followed a support
Cybercriminals From Vietnam Exploiting Stolen Credentials
Facebook, the global social networking giant led by Mark Zuckerberg, has found itself in the midst of an alarming challenge. Recent headlines have shed light
A Quarter of Americans Have Had Their Health Data Compromised
Data breaches within the healthcare sector in the United States are becoming an alarmingly frequent occurrence, and it's a trend that demands our attention.
Major Breakthrough: Arrest of Ragnar Locker Ransomware Developer
In a significant international law enforcement operation, the authorities managed to apprehend a malware developer linked to the notorious Ragnar Locker
Malvertisers Use Google Ads to Trap Users Into Installing Malware
a new and cunning malvertising campaign has surfaced, employing Google Ads to ensnare users searching for popular software. Malwarebytes, the cybersecurity
Munchkin: BlackCat Ransomware’s Latest Tool
The BlackCat ransomware operators have proven to be a formidable adversary, consistently adapting and innovating their malicious activities. Their relentless
Vulnerability in TinyMCE Text Editor Can Allow Attacker Execute XSS Payloads
In the realm of text editors, TinyMCE has long been a popular choice, and on October 19, 2023, Tiny Technologies unveiled a significant update, version