Your blog category
GitGuardian is famous for its annual State of Secrets Sprawl report. In their 2023 report, they found over 10 million exposed passwords, API keys, and other credentials exposed in public GitHub commits.… Read More »Python’s PyPI Reveals Its Secrets
Apple on Wednesday revised its documentation pertaining to its mercenary spyware threat notification system to mention that it alerts users when they may have been individually targeted by such attacks. It also… Read More »Apple Updates Spyware Alert System to Warn Victims of Mercenary Attacks
Fortinet has released patches to address a critical security flaw impacting FortiClientLinux that could be exploited to achieve arbitrary code execution. Tracked as CVE-2023-45590, the vulnerability carries a CVSS score… Read More »Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability
Threat actors are now taking advantage of GitHub’s search functionality to trick unsuspecting users looking for popular repositories into downloading spurious counterparts that serve malware. The latest assault on the… Read More »Beware: GitHub’s Fake Popularity Scam Tricking Developers into Downloading Malware
Cybersecurity researchers have discovered a new Raspberry Robin campaign wave that propagates the malware through malicious Windows Script Files (WSFs) since March 2024. “Historically, Raspberry Robin was known to spread… Read More »Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files
An active Android malware campaign dubbed eXotic Visit has been primarily targeting users in South Asia, particularly those in India and Pakistan, with malware distributed via dedicated websites and Google… Read More »‘eXotic Visit’ Spyware Campaign Targets Android Users in India and Pakistan
The need for vCISO services is growing. SMBs and SMEs are dealing with more third-party risks, tightening regulatory demands and stringent cyber insurance requirements than ever before. However, they often… Read More »Hands-on Review: Cynomi AI-powered vCISO Platform
We all know passwords and firewalls are important, but what about the invisible threats lurking beneath the surface of your systems? Identity Threat Exposures (ITEs) are like secret tunnels for… Read More »Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses
Cybersecurity researchers have disclosed what they say is the “first native Spectre v2 exploit” against the Linux kernel on Intel systems that could be exploited to read sensitive data from… Read More »Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of… Read More »Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks