Category Archive

Avis Car Rental disclosed that hackers had stolen personal data from approximately 300,000 customers. The breach, which occurred between August 3 and August 6, 2024, was detected on August 5 when Avis identified unauthorized access to one of its business …

As a business owner, you’ve likely invested in various security tools such as SIEMs, antivirus software, and IDS/IPS systems. You may also have a dedicated cybersecurity team, like a SOC (Security Operations Center) or a DFIR (Digital Forensics and Incident …

Malicious Chrome extensions pose significant risks to users, as they can compromise personal information, inject unwanted promotions, and even manipulate web traffic as well. There are several malicious extensions that remain undetected for extended periods, and this primarily happens due …

Bitcoin ATMs (BTMs) have emerged as a convenient tool for cryptocurrency transactions, but they have also become a hotbed for scams. With their increasing presence in convenience stores, gas stations, and other high-traffic areas, BTMs are now a favored method …

The Fog, a ransomware variant belonging to the STOP/DJVU family that was formerly targeting educational and recreational SECTORS, has turned its attention towards profitable targets in the finance industry. In early August 2024, threat actors used compromised VPN credentials to …

Elastic has disclosed two critical vulnerabilities affecting Kibana, the popular data visualization and exploration tool used with Elasticsearch. These vulnerabilities, CVE-2024-37288 and CVE-2024-37285, allow attackers to execute arbitrary code through YAML deserialization issues. The flaws have been assigned high severity …

The NSA, FBI, CISA, and allies have assessed the cyber actors associated with the Russian General Staff Main Intelligence Directorate (GRU), Unit 29155, who are responsible for conducting computer network operations against global targets with the intent of espionage, sabotage, …

IBM has disclosed multiple critical vulnerabilities in its webMethods Integration Server, potentially allowing attackers to execute arbitrary commands on affected systems. These vulnerabilities, identified in version 10.15 of the software, pose a severe risk to organizations using this platform for …

Veeam Software, a leading backup, recovery, and data management solutions provider, has announced the discovery and remedy of several critical and high-severity vulnerabilities across multiple products. These vulnerabilities were identified during internal testing and through external reports, highlighting potential risks …

Piggybacking is a term relevant to computer networking and cybersecurity. It describes techniques that aim to optimize data transmission and, conversely, unauthorized access to networks. This article delves into the concept of piggybacking, exploring its application in data communication, its …