Your blog category
Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited by a remote attacker to bypass authentication and… Read More »Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts
A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts. The attack chain,… Read More »Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine
The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads,… Read More »The Next Generation of RBI (Remote Browser Isolation)
Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign. “We have not identified evidence suggesting this… Read More »Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers
Cyber attacks involving the DarkGate malware-as-a-service (MaaS) operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of… Read More »DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active… Read More »Oracle WebLogic Server OS Command Injection Flaw Under Active Attack
Law enforcement authorities behind Operation Endgame are seeking information related to an individual who goes by the name Odd and is allegedly the mastermind behind the Emotet malware. Odd is… Read More »Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet
Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that’s designed to drop a remote access trojan (RAT) on compromised systems. The package in question… Read More »Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users
Threat actors are evolving, yet Cyber Threat Intelligence (CTI) remains confined to each isolated point solution. Organizations require a holistic analysis across external data, inbound and outbound threats and network… Read More »SASE Threat Report: 8 Key Findings for Enterprise Security
Now-patched authorization bypass issues impacting Cox modems that could have been abused as a starting point to gain unauthorized access to the devices and run malicious commands. “This series of… Read More »Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions