Category Archive

Cybersecurity firm Resonance Security has rolled out ‘Harmony’, a new asset monitoring tool to guard Web2 and Web3 apps from major threats.  The launch comes as cybersecurity threats are getting tougher and more complex. Traditional security measures often can’t keep …

A critical security flaw, CVE-2024-37381, has been discovered in the Ivanti Endpoint Manager (EPM) 2024 flat. The vulnerability is an unspecified SQL injection flaw in the core server component of EPM, potentially allowing attackers to execute arbitrary code on affected systems. The …

The notorious cybercrime group FIN7 has once again made headlines with the development of new tools designed to bypass Endpoint Detection and Response (EDR) solutions and conduct automated attacks. This revelation underscores the group’s continued evolution and sophistication in the …

Killer Ultra malware has been found to be targeting endpoint detection and response (EDR) tools from Symantec, Microsoft, and Sentinel One in ransomware attacks. Killer Ultra gathers all Windows event logs, clears them entirely, and acquires kernel-level permissions. ARC Labs …

Atlassian, a leading provider of collaboration and productivity software, has released critical security updates addressing multiple high-severity vulnerabilities in its Data Center and Server products. If exploited, these vulnerabilities could allow attackers to execute arbitrary code on affected systems. The …

Penetration testing companies have expertise in evaluating and improving the security of computer systems, networks, and applications. These companies perform controlled cyber attacks, called penetration tests, to discover weaknesses in an organization’s IT infrastructure. Penetration testing, sometimes known as pen …

Hackers often target internal communications tools to obtain confidential information like employee records, business plans, and proprietary technologies. With these characteristics of trust and openness, internal communications provide valuable but less secure means for cyber-attacks to be launched against an …

Rite Aid, the third-largest drugstore chain in the United States, has disclosed that a data breach in June 2024 exposed the personal information of 2.2 million customers. The company detected unauthorized access to its systems on June 6, 2024, which …

The LI.FI Protocol, a cross-chain bridging and swapping platform, was the victim of a sophisticated cyber-attack that stole approximately $9.7 million in various cryptocurrencies. The exploit primarily affected users who had manually set infinite approvals on specific contracts within the …

Malware authors increasingly rely on encryption to obfuscate their code and evade detection by security tools such as YARA, Suricata, and other static file analysis solutions. For Security researchers, Analyze malware in an Interactive sandbox such as ANY.RUN is a more convenient …