An unnamed European Ministry of Foreign Affairs (MFA) and its three diplomatic missions in the Middle East were targeted by two previously undocumented backdoors tracked as LunarWeb and LunarMail. ESET,… Read More »Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions
While cloud adoption has been top of mind for many IT professionals for nearly a decade, it’s only in recent months, with industry changes and announcements from key players, that many recognize… Read More »It’s Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure
A malware botnet called Ebury is estimated to have compromised 400,000 Linux servers since 2009, out of which more than 100,000 were still compromised as of late 2023. The findings come from… Read More »Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days which have been actively exploited in the wild. Of the 61… Read More »Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
A Dutch court on Tuesday sentenced one of the co-founders of the now-sanctioned Tornado Cash cryptocurrency mixer service to 5 years and 4 months in prison. While the name of the defendant was redacted in the verdict,… Read More »Dutch Court Sentences Tornado Cash Co-Founder to 5 Years in Prison for Money Laundering
Multiple security flaws have been disclosed in VMware Workstation and Fusion products that could be exploited by threat actors to access sensitive information, trigger a denial-of-service (DoS) condition, and execute code under… Read More »VMware Patches Severe Security Flaws in Workstation and Fusion Products
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-4761,… Read More »New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Cybersecurity researchers have uncovered an ongoing social engineering campaign that bombards enterprises with spam emails with the goal of obtaining initial access to their environments for follow-on exploitation. “The incident involves a… Read More »Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls
Deploying advanced authentication measures is key to helping organizations address their weakest cybersecurity link: their human users. Having some form of 2-factor authentication in place is a great start, but many organizations may… Read More »6 Mistakes Organizations Make When Deploying Advanced Authentication
The maintainers of the Cacti open-source network monitoring and fault management framework have addressed a dozen security flaws, including two critical issues that could lead to the execution of arbitrary code. The… Read More »Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code