Your blog category
Cybersecurity researchers have discovered a critical security flaw in an artificial intelligence (AI)-as-a-service provider Replicate that could have allowed threat actors to gain access to proprietary AI models and sensitive information. “Exploitation… Read More »Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data
The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws in Ivanti Connect Secure (ICS) involved the actor creating… Read More »Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack
Threat actors have been observed making use of fake websites masquerading as legitimate antivirus solutions from Avast, Bitdefender, and Malwarebytes to propagate malware capable of stealing sensitive information from Android… Read More »Fake Antivirus Websites Deliver Malware to Android and Windows Devices
Don’t be fooled into thinking that cyber threats are only a problem for large organizations. The truth is that cybercriminals are increasingly targeting smaller businesses, and they’re getting smarter every… Read More »How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild. Assigned the CVE identifier CVE-2024-5274, the… Read More »Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP
Introduction The infamous Colonial pipeline ransomware attack (2021) and SolarWinds supply chain attack (2020) were more than data leaks; they were seismic shifts in cybersecurity. These attacks exposed a critical challenge for Chief Information… Read More »DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?
Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to… Read More »Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies
Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that’s associated with a known backdoor called RustDoor. The… Read More »Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, the open-source, unified stream-processing and batch-processing framework, to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence… Read More »CISA Warns of Actively Exploited Apache Flink Security Vulnerability
Ransomware attacks targeting VMware ESXi infrastructure following an established pattern regardless of the file-encrypting malware deployed. “Virtualization platforms are a core component of organizational IT infrastructure, yet they often suffer from inherent… Read More »Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern