Do Son Expose of the CRON#TRAP Campaign: Discover the latest report from Securonix on a sophisticated malware campaign leveraging open-source virtualization tools.
Find out about the recent security advisory from Veritas regarding a privilege escalation vulnerability in NetBackup on Windows systems.
Uncover the deceptive strategies of North Korean threat actors infiltrating Western job markets through the Contagious Interview and WageMole campaigns.
Uncover the details of the VEILDrive threat campaign leveraging Microsoft services for C2. Learn how the attackers exploited trusted infrastructure to evade detection.
Discover the use of Ethereum smart contracts in a sophisticated supply chain attack, bringing a new level of complexity to malware operations.
Learn about the evolution of ElizaRAT and how APT36 has refined its malware to target high-profile entities in India.
Cisco discloses critical security advisory: CVE-2024-20418. Learn about the command injection vulnerability in Cisco URWB software and its potential impact.
Discover the details of CVE-2024-44258, a symlink vulnerability in Apple's ManagedConfiguration framework. Learn how attackers can exploit it to bypass sandbox restrictions.
Learn about the stealthy keylogger malware used by the North Korean APT group Andariel to infiltrate and harvest sensitive information from U.S. organizations.
Discover the emergence of ToxicPanda, a sophisticated Android malware targeting financial institutions in Europe and Latin America.
Discover the details about LameDuck, a pro-Islamic, anti-Western group responsible for over 35,000 DDoS attacks worldwide.
The vulnerabilities, tracked as CVE-2024-10826 and CVE-2024-10827, are both classified as "use-after-free" flaws.
Protect yourself from Stealc, a powerful infostealer malware. Learn how it targets systems and collects sensitive information, and take action to secure your data.
Discover the rising threat of ORB networks in cybersecurity. Find out how these obfuscated networks enable enhanced attack evasion.
Discover Cable, a powerful open-source tool for Active Directory enumeration and exploitation. Enhance your understanding of AD vulnerabilities and privilege escalation tactics.
Discover the potential security risks of IAM Roles Anywhere in AWS. Learn how attackers can exploit this feature to gain persistent access to AWS accounts.
Discover the details of the cyber-espionage operation conducted by SideWinder, the APT group behind the T-APT-04 campaign.
Discover how Kernel Callback Tables can be manipulated for process injection on Windows systems. Learn about the stealthy method employed by high-profile threat actors.
Stay vigilant against the LastPass phishing scam. Learn how threat actors are using fake reviews to deceive users and compromise their sensitive information.
Stay vigilant against cybercriminals exploiting Remember-Me cookies to breach email accounts. Learn how to protect your online security.
Mykhailo Hanol
The widespread adoption of shared software components has created unprecedented systemic risk in modern computing infrastructure. This...
Google's November 2024 security update addresses 40 flaws in Android, including the actively exploited CVE-2024-43093 & CVE-2024-43047