Category Archive

A code signing certificate is a digital certificate that allows software developers to sign their applications. This ensures both the “authenticity of the publisher” and the “integrity of the code.”HarfangLab researchers recently discovered that threat actors have been actively abusing …

EDRSilencer is a tool designed to enhance data privacy and security by “silencing” or “blocking” unwanted data transmissions from endpoints. The tool is likely used in conjunction with EDR systems to improve overall cybersecurity measures and also provide an additional …

In a disturbing development for e-commerce security, cybersecurity experts have revealed that threat actors are actively exploiting the CosmicSting vulnerability (CVE-2024-34102) to compromise 3 to 5 websites per hour. This critical security flaw, which affects Adobe Commerce and Magento platforms, …

Leeds Equity Partners (“Leeds Equity”) announced today that it has acquired OffSec (the “Company”), the leading provider of continuous cybersecurity workforce development training and professional education for cybersecurity practitioners from Spectrum Equity. Terms of the transaction were not disclosed. OffSec …

Cybersecurity researchers have uncovered a sophisticated malware campaign exploiting Bitbucket, a popular code hosting platform, to deliver dangerous payloads to unsuspecting victims. The attackers are leveraging Bitbucket’s legitimate reputation to host and distribute various types of malware, including remote access …

Security researchers at Kaspersky have uncovered a significant expansion in the capabilities of the SideWinder advanced persistent threat (APT) group. In a report published on October 15, 2024, the Kaspersky that SideWinder has developed a new post-exploitation toolkit called “StealerBot” …

Volt Typhoon is a Chinese state-sponsored hacking group that has been active since at least mid-2021, targeting critical infrastructure sectors in the United States and its territories. The group employs sophisticated techniques to infiltrate networks by using “compromised routers” and …

Cerberus is an advanced Android banking trojan that emerged in 2019, primarily designed to steal sensitive “financial information.” While this sophisticated trojan is commonly distributed via “malicious apps” and “phishing campaigns.” Cybersecurity analysts at Cyble recently discovered the “ErrorFather” campaign …

A group of threat actors, led by the notorious hacker known as IntelBroker, has claimed responsibility for a significant data breach at Cisco Systems, Inc. The hackers allege they have stolen a vast amount of sensitive information and are now …