Your blog category
The growing demand for cybersecurity and compliance services presents a great opportunity for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) to offer virtual Chief Information Security Officer… Read More »The Ultimate MSP Guide to Structuring and Selling vCISO Services
A new variant of the Snake Keylogger malware is being used to actively target Windows users located in China, Turkey, Indonesia, Taiwan, and Spain. Fortinet FortiGuard Labs said the new… Read More »New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection
Users who are on the lookout for popular games were lured into downloading trojanized installers that led to the deployment of a cryptocurrency miner on compromised Windows hosts. The large-scale… Read More »Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities (KEV) catalog,… Read More »CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List
Two security vulnerabilities have been discovered in the OpenSSH secure networking utility suite that, if successfully exploited, could result in an active machine-in-the-middle (MitM) and a denial-of-service (DoS) attack, respectively,… Read More »New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
The Chinese state-sponsored threat actor known as Mustang Panda has been observed employing a novel technique to evade detection and maintain control over infected systems. This involves the use of… Read More »Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks
Cybersecurity researchers are alerting to a new campaign that leverages web injects to deliver a new Apple macOS malware known as FrigidStealer. The activity has been attributed to a previously… Read More »New FrigidStealer Malware Targets macOS Users via Fake Browser Updates
Juniper Networks has released security updates to address a critical security flaw impacting Session Smart Router, Session Smart Conductor, and WAN Assurance Router products that could be exploited to hijack… Read More »Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication
The China-linked threat actor known as Winnti has been attributed to a new campaign dubbed RevivalStone that targeted Japanese companies in the manufacturing, materials, and energy sectors in March 2024.… Read More »Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign
Is AI really reshaping the cyber threat landscape, or is the constant drumbeat of hype drowning out actual, more tangible, real-world dangers? According to Picus Labs’ Red Report 2025 which… Read More »Debunking the AI Hype: Inside Real Hacker Tactics