Your blog category
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain… Read More »Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on social media with information stealer malware and… Read More »Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) files for virtual private networks (VPNs) to deliver a command-and-control… Read More »New Threat Actor ‘Void Arachne’ Targets Chinese Users with Malicious VPN Installers
Are your tags really safe with Google Tag Manager? If you’ve been thinking that using GTM means that your tracking tags and pixels are safely managed, then it might be… Read More »New Case Study: Unmanaged GTM Tags Become a Security Nightmare
Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances. Both shortcomings… Read More »Mailcow Mail Server Flaws Expose Servers to Remote Code Execution
A controversial proposal put forth by the European Union to scan users’ private messages for detection child sexual abuse material (CSAM) poses severe risks to end-to-end encryption (E2EE), warned Meredith… Read More »Signal Foundation Warns Against EU’s Plan to Scan Private Messages for CSAM
Threat actors are luring unsuspecting users with free or pirated versions of commercial software to deliver a malware loader called Hijack Loader, which then deploys an information stealer known as… Read More »Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer
Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed… Read More »New Malware Targets Exposed Docker APIs for Cryptocurrency Mining
Seventy percent of enterprises are prioritizing investment in SaaS security by establishing dedicated teams to secure SaaS applications, as part of a growing trend of maturity in this field of… Read More »The Annual SaaS Security Report: 2025 CISO Plans and Priorities
The Singapore Police Force (SPF) has announced the extradition of two men from Malaysia for their alleged involvement in a mobile malware campaign targeting citizens in the country since June… Read More »Singapore Police Extradites Malaysians Linked to Android Malware Fraud