Category Archive

In today’s rapidly evolving threat landscape, security leaders must make informed decisions to protect their organizations effectively. The “MITRE Engenuity ATT&CK Evaluations: Enterprise” serve as an essential resource for cybersecurity decision-makers. These evaluations simulate real-world threats to assess how different …

A major cryptocurrency exchange, XT.com, suspended all withdrawals on November 28, 2024, following a suspected hack that resulted in the theft of approximately $1.7 million worth of digital assets. The Dubai-based exchange, which boasts a daily trading volume of $3.4 …

North Korean threat actors target software developers with weaponized Javascript projects that include BeaverTail malware deployed via NPM packages. It is intended to steal information and load additional stages of malware, notably a multi-stage Python-based backdoor called InvisibleFerret. The InvisibleFerret …

A new skimmer malware is targeting Magento-powered eCommerce websites, stealing sensitive credit card information from checkout pages.  This malware dynamically creates a false credit card form or directly extracts payment fields, activating only on checkout pages.  Subsequently, the stolen information …

Hewlett Packard Enterprise (HPE) has disclosed multiple high-severity vulnerabilities in its Insight Remote Support (IRS) software, potentially allowing attackers to execute remote code, perform directory traversal, and access sensitive information. The security bulletin, released on November 22, 2024, urges users …

A critical security flaw has been discovered in Zabbix, the popular open-source monitoring solution, potentially allowing attackers to gain full control over affected instances. The vulnerability, identified as CVE-2024-42327, affects multiple versions of Zabbix and has been assigned a CVSS …

A new and dangerous malware campaign known as PixPirate has been targeting users in recent months, primarily in Brazil and India, with infections also spreading to Italy and Mexico. This sophisticated malware poses as a legitimate authentication application, tricking users …

China’s cyber threat landscape has evolved into a complex ecosystem involving state actors, private companies, and academic institutions. This intricate network supports and enhances China’s offensive cyber capabilities, blurring the lines between government, industry, and academia. China’s cybersecurity industry, valued …

Microsoft has re-released the November 2024 Security Updates (SUs) for Exchange Server, addressing a critical issue that caused transport rules to stop functioning after a certain period in some environments. This update comes as a response to widespread reports from …