Tag Archive

Persistence is one of the key things for threat actors to maintain their access to compromised systems and establish connections whenever they require. One of the key methods used to maintain persistence is the use of scheduled tasks. A threat …

SentinelOne, the leading AI-powered security company, has made a significant move in the cloud security landscape by acquiring PingSafe, a pioneer in cloud-native application protection platforms (CNAPP).  This strategic acquisition promises to revolutionize cloud security by offering a comprehensive, integrated …

Previously, in December 2023, it was reported that SSH servers were vulnerable to the new Terrapin Attack in which threat actors can downgrade an SSH protocol version, making it vulnerable to exploitation. In addition, this attack can also be used …

Recently, Xerox’s US subsidiary, Xerox Business Solutions (XBS), experienced a cyber incident, prompting immediate action from Xerox’s cybersecurity personnel.  While the specifics of the intrusion remain under investigation, initial reports indicate containment within XBS US, mitigating further escalation. Active Investigation …

Malicious stockpiled domains are the collection of domain names that threat actors acquire in advance for several types of future malicious activities like:- Phishing attacks Malware distribution Scams Unwanted Program distribution Malicious Search Engine Optimization (SEO) Illicit content distribution While …

A free and open-source packet analyzer, Wireshark is used for network troubleshooting, education, software and communications protocol development, and analysis.  The widespread use of Wireshark is evidence of its reliability, allowing network administrators and security experts to examine network packets …

Kernel vulnerabilities are prevalent in operating systems and can affect billions of devices. One of the most widely used tools for kernel fuzzing is the “Syzkaller,” which generates syscall sequences based on predefined specifications written in zlang. There is existing …

A landmark settlement has been reached in a class-action lawsuit against Google, accusing the tech giant of breaching user privacy by tracking activity in “private mode” browsing modes.  This decision, announced on Thursday, marks a significant victory for consumers and …

Our topic for today seems to be centered around the most common 10 DNS attacks and how to effectively mitigate them. We’ll dive into the details of each attack, their potential impact, and recommended measures to help protect against them. …