Your blog category
Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, “target… Read More »Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks
The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident of allegedly stealing proprietary information from Google while covertly working for two… Read More »Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China
In today’s rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user… Read More »Human vs. Non-Human Identity in SaaS
Facebook messages are being used by threat actors to a Python-based information stealer dubbed Snake that’s designed to capture credentials and other sensitive data. “The credentials harvested from unsuspecting users… Read More »New Python-Based Snake Info Stealer Spreading Through Facebook Messages
Threat actors have been leveraging fake websites advertising popular video conferencing software such as Google Meet, Skype, and Zoom to deliver a variety of malware targeting both Android and Windows… Read More »Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware
The threat actors behind the BlackCat ransomware have shut down their darknet website and likely pulled an exit scam after uploading a bogus law enforcement seizure banner. “ALPHV/BlackCat did not get seized.… Read More »Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout
Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency… Read More »Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining
An in-depth look into a proactive website security solution that continuously detects, prioritizes, and validates web threats, helping to mitigate security, privacy, and compliance risks. [Reflectiz shields websites from client-side attacks,… Read More »A New Way To Manage Your Web Exposure: The Reflectiz Product Explained
Every Google Workspace administrator knows how quickly Google Drive becomes a messy sprawl of loosely shared confidential information. This isn’t anyone’s fault; it’s inevitable as your productivity suite is purposefully… Read More »How to Find and Fix Risky Sharing in Google Drive
Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild. The shortcomings are listed below – CVE-2024-23225 –… Read More »Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws