Tag Archive

A recently discovered credit card theft operation, Magecart, has adopted an innovative approach by utilizing authentic websites as makeshift C2 servers.  This strategy enables them to illicitly implant and conceal skimming malware within specific eCommerce websites. During the checkout process, …

Google has removed 32 malicious extensions from the Chrome Web Store that could have changed search results and pushed spam or unwanted adverts. They have received 75 million downloads altogether.  The PDF Toolbox extension, which has had 2 million downloads …

As technology advances, more and more organizations are turning to cloud computing as a necessary solution for their data storage and processing needs. Cloud computing is a widely accepted trend in the information technology industry, and it allows users to …

Organizations dealing with card payment data must comply with the Payment Card Industry Data Security Standard (PCI DSS) to protect cardholder data. Per this Standard, PCI Penetration Testing must be performed to verify whether or not the organization’s security controls …

Google Drive is one of the most used cloud-based storage platforms, and due to its immense popularity and capabilities, it’s actively targeted by threat actors.  Data theft is a prevalent method employed by malicious actors once they have obtained entry …

New Zero-Click iOS Malware Actively Attacks iPhone Through iMessage By Guru – June 2, 2023 Kaspersky recently reported that a number of iPhones connected to its network were compromised through an iOS vulnerability.  The attackers exploited iMessage’s zero-click exploits, allowing …

A recently discovered vulnerability called “Migraine” is linked to macOS migration and poses a serious threat.  It enables attackers with root privileges to circumvent System Integrity Protection (SIP) on macOS, granting them unrestricted control over the compromised device. The security …

Researchers at Varonis Threat Labs discovered that some Salesforce sites were improperly deactivated or unmaintained SalesforceGhost Sites. Threat actors can exfiltrate PII and business data by simply manipulating the host headers for these websites. Salesforce partners and customers are provided …

Businesses face significant hazards from ransomware attacks, which are capable of causing severe damage in a brief period. Over the past few years, numerous well-known companies, including CNA Financial, JBS Foods, and Colonial Pipeline, have fallen victim to such attacks, …