A nation-state threat actor with ties to North Korea has been linked to an ongoing campaign targeting South Korean business, government, and cryptocurrency sectors. The attack campaign, dubbed DEEP#DRIVE by… Read More »North Korean APT43 Uses PowerShell and Dropbox in Targeted South Korea Cyberattacks
A widespread phishing campaign has been observed leveraging bogus PDF documents hosted on the Webflow content delivery network (CDN) with an aim to steal credit card information and commit financial… Read More »Hackers Use CAPTCHA Trick on Webflow CDN PDFs to Bypass Security Scanners
Ever felt like your team is stuck in a constant battle? Developers rush to add new features, while security folks worry about vulnerabilities. What if you could bring both sides… Read More »Fast Deployments, Secure Code: Watch this Learn to Sync Dev and Sec Teams
AI is everywhere now, transforming how businesses operate and how users engage with apps, devices, and services. A lot of applications now have some Artificial Intelligence inside, whether supporting a… Read More »AI and Security – A New Puzzle to Figure Out
An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups,… Read More »Hackers Exploited PAN-OS Flaw to Deploy Chinese Malware in Ransomware Attack
Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting remote access to infected hosts.… Read More »FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux
Palo Alto Networks has addressed a high-severity security flaw in its PAN-OS software that could result in an authentication bypass. The vulnerability, tracked as CVE-2025-0108, carries a CVSS score of… Read More »Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software
A subgroup within the infamous Russian state-sponsored hacking group known as Sandworm has been attributed to a multi-year initial access operation dubbed BadPilot that stretched across the globe. “This subgroup… Read More »Microsoft Uncovers Sandworm Subgroup’s Global Cyber Attacks Spanning 15+ Countries
Cybersecurity researchers have discovered a bypass for a now-patched security vulnerability in the NVIDIA Container Toolkit that could be exploited to break out of a container’s isolation protections and gain… Read More »Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability
CISOs are finding themselves more involved in AI teams, often leading the cross-functional effort and AI strategy. But there aren’t many resources to guide them on what their role should… Read More »How to Steer AI Adoption: A CISO Guide