Category Archive

Researchers propose a novel backdoor attack method called NoiseAttack. Unlike existing methods that typically target a single class, NoiseAttack can target multiple classes with minimal input configuration by using White Gaussian Noise with various Power Spectral Densities as triggers and …

Hackers often target PyPI packages due to their extensive user base and open-source nature. This helps threat actors distribute malicious code within an open-source ecosystem. The decentralized nature of PyPI makes it challenging for security experts to monitor and detect …

Microchip Technology Incorporated, a leading American semiconductor manufacturer, has confirmed that a cyberattack in August 2024 resulted in the theft of sensitive data. The company disclosed in a recent filing with the U.S. Securities and Exchange Commission that the breach …

A Managed Security Service Provider (MSSP) offers a wide range of services, from network security monitoring and threat detection to incident response and vulnerability assessments. It delivers its services using technology, processes, and expertise. Monitoring a client’s networks and systems …

Cisco Systems has issued a critical security advisory for a vulnerability in the Cisco Meraki Systems Manager (SM) Agent for Windows. The flaw, identified as CVE-2024-20430, allows authenticated local attackers to execute arbitrary code with elevated privileges. With a CVSS …

The Tor Project has officially released Tor Browser 13.5.3, bringing many updates and improvements to enhance security and usability. This latest version is available from the Tor Browser download page and the distribution directory. The release includes critical security updates …

Cisco has recently disclosed multiple critical vulnerabilities in its Smart Licensing Utility (CSLU), which could allow unauthenticated, remote attackers to gain administrative access or collect sensitive information from affected systems. These vulnerabilities, identified as CVE-2024-20439 and CVE-2024-20440, are present in …

Palo Alto Networks, the global cybersecurity leader, has announced the completion of its acquisition of IBM’s QRadar Software as a Service (SaaS) assets. This strategic move, revealed on September 4, 2024, marks a significant milestone in the company’s mission to …

AI SPERA, a leading Cyber Threat Intelligence (CTI) company, has achieved PCI DSS v4.0 certification for its flagship search engine solution, Criminal IP. This accomplishment builds on last year’s attainment of PCI DSS v3.2.1 (Payment Card Industry Data Security Standard) …

Access control is fundamental to operating system (OS) security. It ensures that only authorized processes can perform specific actions on system resources. One key tool used to manage access control is the access matrix. This article explores an access matrix, how …