Top 7 Must-watch Talks at RSA Conference 2023
Top 7 Must-watch Talks at RSA Conference 2023 The RSA Conference 2023 is set to be one of the biggest and most exciting cybersecurity events of the year. With over 500 sessions scheduled, attendees wi...
Cyber Attackers Continue Threatening Education and Healthcare Organiza...
Cyber Attackers Continue Threatening Education and Healthcare Organizations The recent cyber attacks on Bluefield University and University Urology highlight the increasing risk of...
Sandworm Attackers Use WinRAR to Wipe Data from Government Devices
Sandworm Attackers Use WinRAR to Wipe Data from Government Devices Sandworm (UAC-0165), a Russian hacking group, has been linked to an attack on Ukrainian state networks that involved wiping data from...
GoAnywhere MFT Vulnerability Contributes to 91% Increase in Ransomware...
GoAnywhere MFT Vulnerability Contributes to 91% Increase in Ransomware Attacks [May 4, 2023] Update: Brightline, a mental health provider, was among the organizations targeted by the Clop ransomware g...
LOBSHOT hVNC Malware: A New Threat Distributed Through Google Ads
LOBSHOT hVNC Malware: A New Threat Distributed Through Google Ads Cybersecurity researchers have discovered a new malware, called ‘LOBSHOT,’ distributed through Google ads. This malware al...
Global Malverposting Campaign Infecting Over 500,000 Devices
Global Malverposting Campaign Infecting Over 500,000 Devices A global malverposting campaign that has been ongoing for the past three months has been traced back to a Vietnamese threat actor...
Active Exploitation of Serious Vulnerabilities in PaperCut, Veeam, and...
Active Exploitation of Serious Vulnerabilities in PaperCut, Veeam, and TP-Link [Update] July 11, 2024: “EstateRansomware Exploits CVE-2023-27532 in Veeam Systems” [Update] April 18, 2024:...
Apache Superset Default Configuration Vulnerability Could Lead to RCE
Apache Superset Default Configuration Vulnerability Could Lead to RCE [Update] January 9, 2024: “CISA Added Apache Superset Vulnerability (CVE-2023-27524) to the Known Exploited Vulnerabilities (KEV)...
Severe SLP Vulnerability Could Lead to Large DDoS Amplification Attack...
Severe SLP Vulnerability Could Lead to Large DDoS Amplification Attacks A new high-severity vulnerability was discovered, affecting Service Location Protocol (SLP). The vulnerability could allow ...
PyPI Packages Found Distributing Payloads in WhiteSnake Malware Campai...
PyPI Packages Found Distributing Payloads in WhiteSnake Malware Campaign Security researchers recently uncovered a new malware payload in the PyPI repository for Python packages. The payload...
EvilExtractor Stealer Malware Attacks Peaked in March 2023
EvilExtractor Stealer Malware Attacks Peaked in March 2023 EvilExtractor (or Evil Extractor), a data theft tool, is trending in Europe and the United States due to an uptick in attacks. EvilExtra...
APT28 Exploits Cisco Vulnerability to Deploy Malware in Espionage Camp...
APT28 Exploits Cisco Vulnerability to Deploy Malware in Espionage Campaign Russian nation-state actors are using a patched remote code execution vulnerability in Cisco network appliances to ...
Zaraza Bot: New Malware Uses Telegram for Command & Control
Zaraza Bot: New Malware Uses Telegram for Command & Control The Zaraza bot is a new type of malware that steals login information and uses Telegram as its command and control. This malware target...
Lockbit 3.0: Another Upgrade to World’s Most Active Ransomware
Lockbit 3.0: Another Upgrade to World’s Most Active Ransomware Last Update: April 17, 2023 LockBit Ransomware gang, also known as Bitwise Spider, are the cybercriminal masterminds behind the popular L...
Change of Tactic in DDoS: Attackers Now Use VPS for Improved Botnet At...
Change of Tactic in DDoS: Attackers Now Use VPS for Improved Botnet Attacks Cloudflare, a prominent internet security company, recently published a report on hyper-volumetric DDoS attacks ch...
Recapping Cyberwatch: Insights and Key Takeaways from April's Webinar
Recapping Cyberwatch: Insights and Key Takeaways from April’s Webinar In today’s digital world, cyberattacks are becoming increasingly frequent and sophisticated, posing a significant thre...
Recent Data Breaches: Hyundai, NorthOne Bank, and Kodi
Recent Data Breaches: Hyundai, NorthOne Bank, and Kodi Data breaches have become widespread in the digital age, leaving companies and individuals at risk of cyber attacks. Three high-profile companies...
Microsoft and SAP Release Security Updates to Address Critical Vulnera...
Microsoft and SAP Release Security Updates to Address Critical Vulnerabilities Microsoft has released new security updates on the Patch Tuesday April 2023, to address 97 vulnerabilities. One...
CISA Warns: Patch Apple Zero-Day Vulnerabilities Until May
CISA Warns: Patch Apple Zero-Day Vulnerabilities Until May Apple released patches on April 7 to address two zero-day vulnerabilities, CVE-2023-28205 and CVE-2023-28206. The vendor acknowledges a ...
Critical Vulnerability in vm2 JavaScript Sandbox Library: Exploit Code...
Critical Vulnerability in vm2 JavaScript Sandbox Library: Exploit Code Available [April 19, 2023] Update: Added subheading: “Patches Released for New Vulnerabilities: CVE-2023-29199 and CVE-2023-30547...