Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Gaza-based threat actor has been linked to a series of cyber attacks aimed at Israeli private-sector energy, defense, and telecommunications organizations.Mi…
Researchers have found a new EvilProxy phishing campaign that targets Microsoft 365 accounts. To trick…EvilProxy Phishing Targets Microsoft 365 Accounts Via In…
Multiple security vulnerabilities have been disclosed in the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management cont…
Nowadays, more malware developers are using unconventional programming languages to bypass advanced detection systems. The Node.js malware Lu0Bot is a testamen…
A governmental entity in Guyana has been targeted as part of a cyber espionage campaign dubbedOperation Jacana.Theactivity, which was detected by ESET in Febru…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesdayaddedtwo security flaws to its Known Exploited Vulnerabilities (KEV) catalog due t…
Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it said has come under active exploitation in the wild.Tra…
The recently patched TeamCity RCE flaw is now under active attack by numerous ransomware gangs.…TeamCity RCE Flaw Actively Exploited To Deploy Ransomware on La…
Today, mid-sized companies and their CISOs are struggling to handle the growing threat of SaaS security with limited manpower and tight budgets. Now, this may …
A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77, marking the first time a rogue p…
Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environmentthrough an SQL Server instance."The a…
Nearly three dozen counterfeit packages have been discovered in the npm package repository that are designed to exfiltrate sensitive data from developer system…
APIs, also known as application programming interfaces, serve as the backbone of modern software applications, enabling seamless communication and data exchang…
Security Configuration Assessment (SCA)is critical to an organization's cybersecurity strategy. SCA aims to discover vulnerabilities and misconfigurations that…
Arm has released security patches to contain a security flaw in the Mali GPU Kernel Driver that has come under active exploitation in the wild.Tracked asCVE-20…
Although Cloudflare provides resilient DDoS protection, a researcher devised a strategy to bypass the security…Cloudflare DDoS Protection Flaws Allowed Securit…
In a recent phishing campaign, the researchers noticed the use of the long-known ZeroFont phishing…Hackers Use ZeroFont Phishing To Target Microsoft Outlook Us…
Researchers have discovered a new phishing campaign that exploits Microsoft’s Bing Chat to promote malicious…Hackers Meddle With Bing Chat Ads To Promote Malic…
IntroductionIn today's interconnected digital ecosystem, Application Programming Interfaces (APIs) play a pivotal role in enabling seamless communication and d…
LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Prov…
Heads up, Chrome users! Google has just released a major security update for its Chrome…Another Chrome Zero-Day Under Attack Received A Fix on Latest Hacking N…
Researchers caught a serious security flaw in JetBrains TeamCity software that could allow unauthenticated code…Critical Security Flaw Found In JetBrains TeamC…
A high-severity security flaw has been disclosed in the open-source OpenRefine data cleanup and transformation tool that could result in arbitrary code executi…
Cybersecurity experts have discovered yet another malware-as-a-service (MaaS) threat calledBunnyLoaderthat's being advertised for sale on the cybercrime underg…
