Tag Archive

Silver and Cobalt Strike are sophisticated adversary simulation tools that are widely used in penetration testing and red team operations. These tools enable security researchers to emulate advanced persistent threats by offering features like “covert command and control channels” and …

BBTok is a banking malware first identified in 2020 and it primarily targets users in Latin America (particularly Mexico and Brazil). It employs sophisticated tactics like phishing emails that lead to the download of malicious files, which can replicate the …

In a move to address growing concerns over privacy and security, Microsoft has unveiled significant updates to the security architecture of its Recall feature, an AI-powered tool designed to help users find what they’ve seen on their PCs. The updates …

Authorization is a fundamental concept in information security and access management. It is crucial to determine who can access specific resources and what actions they can perform. This article will thoroughly explore the authorization concept, examining its importance, various models, …

Bishop Fox has introduced Broken Hill, an advanced automated tool created to produce tailored prompts that can circumvent restrictions in Large Language Models (LLMs). This marks a significant advancement in AI security research. This innovative software implements the Greedy Coordinate …

Zoom announced new add-on products and functionalities to strengthen its advanced enterprise offerings portfolio. These enhancements help organizations meet compliance, security, privacy, survivability, and manageability requirements. Commitment to Empowering Businesses “Zoom’s advanced enterprise offerings reflect our commitment to empowering businesses …

A DDoS attack is a cyber attack aimed at disrupting the normal functioning of a targeted server, service, or network by flooding it with excessive internet traffic.  While this is achieved via a network of compromised devices, known as a …

Recent investigations by cybersecurity experts have uncovered valuable insights into detecting human-operated ransomware attacks through Windows Event Logs. This breakthrough could significantly improve organizations’ ability to identify and respond to these increasingly sophisticated threats. JPCERT/CC, a prominent cybersecurity coordination center, …

The U.S. Department of Justice has unsealed an indictment against three Iranian nationals linked to the Islamic Revolutionary Guard Corps (IRGC) for their alleged involvement in a “hack-and-leak” operation aimed at influencing the 2024 U.S. presidential election. The accused, Masoud …