Your blog category
The recently leaked trove of internal chat logs among members of the Black Basta ransomware operation has revealed possible connections between the e-crime gang and Russian authorities. The leak, containing… Read More »Leaked Black Basta Chats Suggest Russian Officials Aided Leader’s Escape from Armenia
The threat actors behind the ClearFake campaign are using fake reCAPTCHA or Cloudflare Turnstile verifications as lures to trick users into downloading malware such as Lumma Stealer and Vidar Stealer.… Read More »ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info-Stealers
In today’s digital world, security breaches are all too common. Despite the many security tools and training programs available, identity-based attacks—like phishing, adversary-in-the-middle, and MFA bypass—remain a major challenge. Instead… Read More »Watch This Webinar to Learn How to Eliminate Identity-Based Attacks—Before They Happen
Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network… Read More »5 Identity Threat Detection & Response Must-Haves for Super SaaS Security
Cybersecurity researchers have disclosed details of two critical flaws impacting mySCADA myPRO, a Supervisory Control and Data Acquisition (SCADA) system used in operational technology (OT) environments, that could allow malicious… Read More »Critical mySCADA myPRO Flaws Could Let Attackers Take Over Industrial Control Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV)… Read More »CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise
Cybersecurity researchers have disclosed details of a new supply chain attack vector dubbed Rules File Backdoor that affects artificial intelligence (AI)-powered code editors like GitHub Copilot and Cursor, causing them… Read More »New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code Editors
A critical security vulnerability has been disclosed in AMI’s MegaRAC Baseboard Management Controller (BMC) software that could allow an attacker to bypass authentication and carry out post-exploitation actions. The vulnerability,… Read More »New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking
Google is making the biggest ever acquisition in its history by purchasing cloud security company Wiz in an all-cash deal worth $32 billion. “This acquisition represents an investment by Google… Read More »Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security
An unpatched security flaw impacting Microsoft Windows has been exploited by 11 state-sponsored groups from China, Iran, North Korea, and Russia as part of data theft, espionage, and financially motivated… Read More »Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017