Your blog category
Traditional perimeter-based security has become costly and ineffective. As a result, communications security between people, systems, and networks is more important than blocking access with firewalls. On top of that, most… Read More »Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management
In today’s digital era, data privacy isn’t just a concern; it’s a consumer demand. Businesses are grappling with the dual challenge of leveraging customer data for personalized experiences while navigating… Read More »Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data
The U.S. government is warning about the resurgence of BlackCat (aka ALPHV) ransomware attacks targeting the healthcare sector as recently as this month. “Since mid-December 2023, of the nearly 70… Read More »FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks
Mexican users have been targeted with tax-themed phishing lures at least since November 2023 to distribute a previously undocumented Windows malware called TimbreStealer. Cisco Talos, which discovered the activity, described the authors as… Read More »TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users
In a new joint advisory, cybersecurity and intelligence agencies from the U.S. and other countries are urging users of Ubiquiti EdgeRouter to take protective measures, weeks after a botnet comprising… Read More »Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28’s MooBot Threat
Cybersecurity researchers have found that it’s possible to compromise the Hugging Face Safetensors conversion service to ultimately hijack the models submitted by users and result in supply chain attacks. “It’s… Read More »New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored threat actor known as APT29. The hacking outfit, also… Read More »Five Eyes Agencies Expose APT29’s Evolving Cloud Attack Tactics
Processing alerts quickly and efficiently is the cornerstone of a Security Operations Center (SOC) professional’s role. Threat intelligence platforms can significantly enhance their ability to do so. Let’s find out… Read More »From Alert to Action: How to Speed Up Your SOC Investigations
An “intricately designed” remote access trojan (RAT) called Xeno RAT has been made available on GitHub, making it available to other actors at no extra cost. Written in C# and compatible with… Read More »Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub
A security vulnerability has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges. Tracked as CVE-2023-40000, the vulnerability was addressed in October… Read More »WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk