The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys.… Read More »China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices
More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that’s vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue,… Read More »Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution
Cybercriminals are vipers. They’re like snakes in the grass, hiding behind their keyboards, waiting to strike. And if you’re a small- and medium-sized business (SMB), your organization is the ideal lair… Read More »It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs
Multiple security vulnerabilities have been disclosed in various applications and system components within Xiaomi devices running Android. “The vulnerabilities in Xiaomi led to access to arbitrary activities, receivers and services with system… Read More »Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components
Cybersecurity researchers have discovered a new information stealer targeting Apple macOS systems that’s designed to set up persistence on the infected hosts and act as a spyware. Dubbed Cuckoo by Kandji, the… Read More »New ‘Cuckoo’ Persistent macOS Spyware Targeting Intel and Arm Macs
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from the European… Read More »Microsoft Outlook Flaw Exploited by Russia’s APT28 to Hack Czech, German Entities
Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to “facilitate communications with command-and-control (C&C) infrastructure hosted on Microsoft cloud services,” the Symantec Threat… Read More »Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications
In today’s rapidly evolving digital landscape, the threat of Distributed Denial of Service (DDoS) attacks looms more significant than ever. As these cyber threats grow in sophistication, understanding and countering… Read More »Expert-Led Webinar – Uncovering Latest DDoS Tactics and Learn How to Fight Back
SaaS applications are dominating the corporate landscape. Their increased use enables organizations to push the boundaries of technology and business. At the same time, these applications also pose a new security… Read More »New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data
The U.S. government on Thursday published a new cybersecurity advisory warning of North Korean threat actors’ attempts to send emails in a manner that makes them appear like they are from legitimate… Read More »NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources