
How Did Cisco Get Hacked, What Was Leaked, and What Did We Learn?
How Did Cisco Get Hacked, What Was Leaked, and What Did We Learn? ...

Traffic Light Protocol is Updated to Version 2.0
Traffic Light Protocol is Updated to Version 2.0 The Forum of Incident Response and Security Teams (FIRST) has shared an update for Traffic Light Protocol (TLP), denominating the latest version a...

Microsoft Fixes 121 Security Flaws in August Patch Tuesday
Microsoft Fixes 121 Security Flaws in August Patch Tuesday In this month’s Patch Tuesday, Microsoft fixed 121 flaws in total, including two zero-day vulnerabilities that are actively exploited. ...

Why are Russian Threat Actors Targeting Azerbaijan?
Why are Russian Threat Actors Targeting Azerbaijan? Since the start of the Russian invasion of Ukraine, Ukrainian organizations have been bombarded with cyberattacks executed by Russian threat actors....

Critical Vulnerabilities in Exim Email Server Allow RCE
Critical Vulnerabilities in Exim Email Server Allow RCE Two critical vulnerabilities discovered in the open source email server Exim threaten over 500,000 email servers. One of the vulnerabilities all...

Top 10 DNS Threat Analysis and Monitoring Tools
Top 10 DNS Threat Analysis and Monitoring Tools DNS converts easy-to-remember domain names into numeric IP addresses determined by the primary network protocols of the computer services and devices to...

Linux Malware RapperBot Brute Forcing SSH Servers
Linux Malware RapperBot Brute Forcing SSH Servers RapperBot is an IoT botnet malware that has spread through brute force since it was first identified in June 2022. Over 3,500 unique IPs were utilized...

Gartner: EASM and DRPS Services Rise in the Market
Gartner: EASM and DRPS Services Rise in the Market Gartner shared HypeCyclefor Security Operations, 2022, which it publishes periodically and aims to provide insight into cyber security operations and...

Dark Utilities Platform Provides C2 Server for Threat Actors
Dark Utilities Platform Provides C2 Server for Threat Actors Cybercriminals can now use a new service called Dark Utilities to build up a command and control (C2) center for their malicious activities...

Cisco Fixed RCE and Command Injection Flaws in VPN Router Series
Cisco Fixed RCE and Command Injection Flaws in VPN Router Series Cisco released fixes for several vulnerabilities in its VPN routers. Affected products could be subject to remote code execution, comma...

Dark Web Profile: Vice Society Ransomware Group
Dark Web Profile: Vice Society Ransomware Group By SOCRadar Research In recent years, the ransomware threat has snowballed. Many new actors have begun to show their heads in the scene and target organ...

IBM Report: Data Breach Costs Higher Than Ever
IBM Report: Data Breach Costs Higher Than Ever IBM has published the Cost of a Data Breach report, which reveals how organizations from different industries are affected by data breaches and set futur...

VMware Fixes Critical Vulnerabilities Including RCE and Authentication...
VMware Fixes Critical Vulnerabilities Including RCE and Authentication Bypass With the security update released Tuesday, VMware fixed ten vulnerabilities affecting some of its products. One is the aut...

How to Detect Reconnaissance Using MITRE ATT&CK Framework
How to Detect Reconnaissance Using MITRE ATT&CK Framework In this article, we will look at the reconnaissance techniques from the MITRE ATT&CK framework’s point of view and discuss how to dete...

Banking Trojans Distributed on Google Play Store in DawDropper Campaig...
Banking Trojans Distributed on Google Play Store in DawDropper Campaign Cybersecurity researchers have uncovered a new campaign to distribute banking trojans on the Google Play Store. These ̶...

Insider Threats Rising: Average Cost of an Incident is $6.6M
Insider Threats Rising: Average Cost of an Incident is $6.6M The annual Cost of a Data Breach Report, featuring research by Ponemon Institute, offers insights from 550 actual breaches to help you unde...

Vulnerabilities in Atlassian Confluence Actively Exploited
Vulnerabilities in Atlassian Confluence Actively Exploited The critical hard-coded credentials flaw in Atlassian’s Questions For Confluence app (CVE-2022-26138) has been actively explo...

Top 5 Free Attack Surface Management Tools
Top 5 Free Attack Surface Management Tools Attack surface management is the continual identification, monitoring, assessment, prioritizing, and remediation of attack vectors within an organization’s I...

Threats of Commercialized Malware: Knotweed
Threats of Commercialized Malware: Knotweed Microsoft associates the private sector offensive actor (PSOA) Knotweed with the Austrian spyware distributor DSIRF. DSIRF, founded in 2016, advertises...

Does the Killnet Pose a Serious Threat to Our Industry?
Does the Killnet Pose a Serious Threat to Our Industry? Killnet is a pro-Russian hacktivist group known for its DoS and DDoS attacks on government institutions and companies in multiple countries whil...