New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an effort to bypass anti-fraud measures, indicating that the malicious software is continuing to… Read More »New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday, citing evidence of… Read More »CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizations are starting to realize that a shake-up… Read More »Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large
Threat actors have been observed abusing Amazon S3 (Simple Storage Service) Transfer Acceleration feature as part of ransomware attacks designed to exfiltrate victim data and upload them to S3 buckets… Read More »Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks
It may come as a surprise to learn that 34% of security practitioners are in the dark about how many SaaS applications are deployed in their organizations. And it’s no… Read More »Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models (LLMs) during the course of an interactive conversation by sneaking in… Read More »Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models
Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit called Gophish to deliver DarkCrystal RAT (aka DCRat) and a previously undocumented remote… Read More »Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on compromised instances, according to new findings from Trend Micro. “In this attack, the… Read More »Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks
Details have emerged about a now-patched security flaw in Styra’s Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Technology LAN Manager (NTLM) hashes.… Read More »Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers
Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without proper monitoring, they can pose a significant security risk due to their elevated… Read More »A Comprehensive Guide to Finding Service Accounts in Active Directory