Businesses and developers are focusing more on the security of applications in their digital environment as cyber threats and data breaches continue escalating. The average data breach cost – due …
ChatGPT for Digital Forensic – AI-Powered Cybercrime Investigation
OpenAI’s ChatGPT (GPT-3.5, GPT-4) and other LLMs like BERT, Bard, etc. have sparked widespread debate due to their disruptive applications across various fields. These LLM modules generate answers and solutions …
12 Best Vulnerability Management Tools 2023
Vulnerability Management Tools play a significant role in detecting, analyzing, and patching vulnerabilities in web and network-based applications. Vulnerability, risk, and threat are the most common words used when it …
Apache OpenMeeting Flaw Allows Server Hijacks and Command Execution
OpenMeetings is an application that can be used for video calls, collaborative work, and presentations. It can also be added as a plugin to Jira, Confluence or Drupal applications. Recent …
What is Cloud-native Web Application Firewall (Cloud-native WAF)?
With your on-premise security solution comprising hardware, software, signatures, rules, and machine learning, you may think your applications are fully protected. How do you know for sure that your apps …
Hackers Exploiting Critical Citrix NetScaler Zero-day Flaw To Deploy Webshells
The Cybersecurity and Infrastructure Security Agency (CISA) recently released a security advisory that indicates that threat actors have been exploiting a Zero-day vulnerability in Citrix ADC (Application Delivery Controller) and …
Hackers Use Fake Update Page Mimicking Victim’s Browser to Deliver NetSupport RAT
Threat actors deliver NetSupport RAT through a new campaign called Fake SG which could rival with SocGholish. This campaign utilizes hacked WordPress websites to display a custom landing page mimicking …
Mallox Ransomware Attacking MS-SQL Servers to Compromise Victims’ Networks
A new ransomware strain dubbed, Mallox (aka TargetCompany, FARGO, and Tohnichi) is actively targeting and attacking Microsoft SQL (MS-SQL) servers. Since June 2021, this new ransomware strain has been active, …
Hackers Fraudulent Job offers to target University Students
Campaigns of Fraudulent Job offers target university students in North America, asking victims to pay a fee in exchange for work. The campaigns began as early as March 2023 and …
P2P Worm Attacking 307,000 Redis Instances on Linux and Windows Systems
P2PInfect is a new P2P worm that is actively targeting the Redis servers on Linux and Windows OS, making it highly scalable and powerful compared to others. While not all …