Chinese Hackers Target US Federal Agencies: U.S. Government Agency Emails Compromised
Chinese hackers have recently breached the email accounts of a US Federal Civilian Executive Branch (FCEB) agency, as part of a larger cyberespionage campaign
Dimitris Gkoutzamanis
Published items (286)
Microsoft Patches Zero-Day Vulnerabilities And Addresses Issues With Signed Drivers Being Used Maliciously
On this recent Patch Tuesday, Microsoft released a significant number of security patches for July 2023. With more than 100 vulnerabilities addressed,
Ransomware Gangs Collect $449 Million in Extortion Profits: A Rising Threat to Organizations
Ransomware gangs have experienced a surge in profitability during the first half of this year, raking in over $449 million from their victims, as reported by
Beware of “Letscall”: Advanced Vishing Technique
Researchers have recently sounded the alarm about a sophisticated and emerging form of voice phishing (vishing) called "Letscall." This alarming technique is
CISA Issues Warnings as New Vulnerabilities in MOVEit Software Expose Sensitive Information
The federal government issues a strong warning about three recently discovered vulnerabilities in the popular MOVEit file transfer software. These
Decoding the TA453 Threat: Unleashing Advanced Malware Campaigns Targeting Windows and macOS
TA453, a sophisticated nation-state actor, has been identified as an entity closely associated with various other notorious groups such as Charming Kitten,
Critical Flaw in Fortinet Firewalls Exposes SSL VPN Interfaces: Over 490,000 Devices Vulnerable
A recent report reveals a critical flaw in Fortinet firewalls, leaving over 490,000 devices at risk of exploitation. This article explores the vulnerability,
White Snake Stealer: A Formidable Info Stealer Targeting Windows and Linux Platforms
White Snake Stealer, an advanced information stealer, has recently evolved with enhanced features, making it capable of targeting both Windows and Linux
The Pros and Cons of Virtual Chief Information Security Officers (vCISOs)
An increasing number of modern security-conscious companies have Chief Information Security Officers (CISOs) on their payroll to manage the growing threat of
Avast released a free decryptor for the Akira ransomware that can allow victims to recover their data without paying the ransom
Avast, the renowned cybersecurity firm, has released a free decryptor for the Akira ransomware. This decryptor enables victims to recover their encrypted data
Half of EDR Tools, Organizations Vulnerable to Clop Ransomware, Research Says
In recent assessments conducted by cybersecurity company Cymulate, it was revealed that nearly half of the endpoint detection and response (EDR) tools and
MITRE Releases Annual List of Top 25 Most Dangerous Software Weaknesses for 2023
MITRE has recently released its annual list of the top 25 most dangerous software weaknesses for the year 2023.
More Major Corporations Added to the Growing MOVEit Victim List
The recent MOVEit breach that has impacted two major energy corporations and numerous organizations. Discover the details of the hacking campaign, the vulnerability exploited, and the potential consequences for affected entities. Stay informed about the latest developments in cybersecurity and sa…
Nessus Plugin Vulnerability May ALlow Attackers Escalate The Privileges
Nessus is a powerful vulnerability scanning tool developed by Tenable. With its comprehensive range of plugins, it provides organizations with the ability to
Cryptojacking Campaign Exploiting Linux and IoT Devices
Microsoft researchers have identified a series of attacks that employ brute force techniques to gain unauthorized access to systems, enabling illicit
One of the Most Popular Open-Source Systems for Analytics and Visualization, Grafana, Faces Security Flaw
Grafana, a widely used open-source platform for analytics and visualization, has recently been discovered to have a security vulnerability. This system caters
Over 33% of Employees are Clicking Malicious Links According to Phishing Report
In recent years, the frequency and impact of data breaches have been on the rise. Organizations worldwide have suffered significant losses due to ransomware
The Internet Systems Consortium (ISC) Addressed Three Denial-of-Service (DoS) Vulnerabilities in the DNS Software Suite BIND
The Internet Systems Consortium (ISC) released security updates for the DNS software suite BIND, addressing three high-severity denial-of-service (DoS) vulnerabilities.