Your blog category
How safe is your comments section? Discover how a seemingly innocent ‘thank you’ comment on a product page concealed a malicious vulnerability, underscoring the necessity of robust security measures. Read… Read More »New Case Study: The Malicious Comment
A Russian operator of a now-dismantled BTC-e cryptocurrency exchange has pleaded guilty to money laundering charges from 2011 to 2017. Alexander Vinnik, 44, was charged in January 2017 and taken into custody… Read More »Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering
Google on Monday announced that it’s simplifying the process of enabling two-factor authentication (2FA) for users with personal and Workspace accounts. Also called, 2-Step Verification (2SV), it aims to add an extra… Read More »Google Simplifies 2-Factor Authentication Setup (It’s More Important Than Ever)
The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys.… Read More »China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices
More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that’s vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue,… Read More »Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution
Cybercriminals are vipers. They’re like snakes in the grass, hiding behind their keyboards, waiting to strike. And if you’re a small- and medium-sized business (SMB), your organization is the ideal lair… Read More »It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs
Multiple security vulnerabilities have been disclosed in various applications and system components within Xiaomi devices running Android. “The vulnerabilities in Xiaomi led to access to arbitrary activities, receivers and services with system… Read More »Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components
Cybersecurity researchers have discovered a new information stealer targeting Apple macOS systems that’s designed to set up persistence on the infected hosts and act as a spyware. Dubbed Cuckoo by Kandji, the… Read More »New ‘Cuckoo’ Persistent macOS Spyware Targeting Intel and Arm Macs
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from the European… Read More »Microsoft Outlook Flaw Exploited by Russia’s APT28 to Hack Czech, German Entities
Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to “facilitate communications with command-and-control (C&C) infrastructure hosted on Microsoft cloud services,” the Symantec Threat… Read More »Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications