Category Archive

In a recent presentation at the FIRST CTI in Berlin and Botconf in Nice, VirusTotal unveiled innovative methods to track adversary activity by focusing on images and artifacts used during the initial stages of the kill chain. This approach aims …

Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789). This actor uses a combination of many tried-and-true techniques used by other North Korean threat actors and unique attack methodologies to target companies for …

Microsoft Office allows one to generate a professional business report on office365 or write college essays, prepare CVs, take notes, and perform analysis.  These offer text and data editing, like macros and Python scripting in Excel, that enable automatic data …

The United States has imposed sanctions on a cybercrime network responsible for operating a massive residential proxy botnet service to combat cybercrime. This network, 911.re, has been implicated in various illicit activities. It leverages residential IP addresses to anonymize malicious …

A critical security vulnerability has been identified in the Citrix Workspace app for Mac, potentially allowing attackers to elevate their privileges from a local authenticated user to a root user. This vulnerability tracked as CVE-2024-5027, poses a significant risk to …

In a dramatic turn of events, hackers have claimed a massive data breach involving Ticketmaster, allegedly exposing the details of 560 million users and their payment card information. This claim has catapulted BreachForums into the spotlight, providing the platform with …

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Fortinet’s FortiSIEM. The vulnerability, CVE-2024-23108, allows for remote, unauthenticated command execution as root. This article delves into the details of the vulnerability, its discovery, and its implications for …