BeyondTrust has disclosed details of a critical security flaw in Privileged Remote Access (PRA) and Remote Support (RS) products that could potentially lead to the execution of arbitrary commands. Privileged… Read More »BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products
Across small-to-medium enterprises (SMEs) and managed service providers (MSPs), the top priority for cybersecurity leaders is to keep IT environments up and running. To guard against cyber threats and prevent… Read More »ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation
The Russia-linked APT29 threat actor has been observed repurposing a legitimate red teaming attack methodology as part of cyber attacks leveraging malicious Remote Desktop Protocol (RDP) configuration files. The activity,… Read More »APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
Having been at ActiveState for nearly eight years, I’ve seen many iterations of our product. However, one thing has stayed true over the years: Our commitment to the open source… Read More »Not Your Old ActiveState: Introducing our End-to-End OS Platform
INTERPOL is calling for a linguistic shift that aims to put to an end to the term “pig butchering,” instead advocating for the use of “romance baiting” to refer to… Read More »INTERPOL Pushes for “Romance Baiting” to Replace “Pig Butchering” in Scam Discourse
Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution. The issue, tracked as CVE-2024-53677, carries a… Read More »Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected
Meta Platforms, the parent company of Facebook, Instagram, WhatsApp, and Threads, has been fined €251 million (around $263 million) for a 2018 data breach that impacted millions of users in… Read More »Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts
A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate. “An attacker used social engineering via a Microsoft… Read More »Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware
A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan. Cybersecurity company Securonix, which is tracking the activity… Read More »Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks
Even the best companies with the most advanced tools can still get hacked. It’s a frustrating reality: you’ve invested in the right solutions, trained your team, and strengthened your defenses.… Read More »Even Great Companies Get Breached — Find Out Why and How to Stop It