Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
IBM's 2023 installment of their annual "Cost of a Breach" report has thrown up some interesting trends. Of course, breaches being costly is no longer news at t…
A new phishing attack likely targeting civil society groups in South Korea has led to the discovery of a novel remote access trojan calledSuperBear.The intrusi…
An open-source .NET-based information stealer malware dubbedSapphireStealeris being used by multiple entities to enhance its capabilities and spawn their own b…
kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) For more details abo…
A coordinated law enforcement effort codenamedOperation Duck Hunthas felledQakBot, a notorious Windows malware family that's estimated to have compromised over…
Unpatched Citrix NetScaler systems exposed to the internet are being targeted by unknown threat actors in what's suspected to be a ransomware attack.Cybersecur…
cups: Information leak through Cups-Get-Document operation (CVE-2023-32360) For more details about the security issue(s), including the impact, a CVSS score, a…
The leak of theLockBit 3.0 ransomwarebuilder last year has led to threat actors abusing the tool to spawn new variants.Russian cybersecurity company Kaspersky …
Risk and financial advisory solutions provider Kroll on Friday disclosed that one of its employees fell victim to a "highly sophisticated" SIM swapping attack.…
A ransomware campaign by the recently emerged Monti ransomware group is targeting victims with a new Linux variant of its malware. The threat group is the late…
Cybersecurity researchers have detailed an updated version of an advanced fingerprinting and redirection toolkit calledWoofLockerthat's engineered to conduct t…
Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation.The …
The threat actors linked to the malware loader known as IcedID have made updates to the BackConnect (BC) module that's used for post-compromise activity on hac…
The U.S. Securities and Exchange Commission (SEC) on Wednesday approved new rules that require publicly traded companies to publicize details of a cyber attack…
The financially motivated threat actors behind theCasbaneirobanking malware family have been observed making use of a User Account Control (UAC) bypass techniq…
Organizations running Linux distributions need to prepare to defend their systems against ransomware attacks. Steps to ensure resiliency and basics such as acc…
Regardless of the country, local government is essential in most citizens' lives. It provides many day-to-day services and handles various issues. Therefore, t…
A developing piece of ransomware calledBig Headis being distributed as part of a malvertising campaign that takes the form of bogus Microsoft Windows updates a…
Ransomware attacks are a major problem for organizations everywhere, and the severity of this problem continues to intensify.Recently, Microsoft's Incident Res…
A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed…
Threat actors associated with theBlackCat ransomwarehave been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer…
A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to execute malicious code on compromised s…
An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy.Elastic…
Niels Dossche and Tim D'¼sterhus discovered that PHP's implementation of the SOAP HTTP Digest authentication did not check for failures, which may result in a …
