Tag Archive

In a groundbreaking move within the cybersecurity arena, CrowdStrike, a leading name in cloud security, has announced its agreement to acquire Bionic, the pioneer of Application Security Posture Management (ASPM).  This strategic acquisition is set to redefine cloud security by …

Konni, a North Korean APT group, launched the first attack against the cryptocurrency industry, exploiting a recently found WinRAR vulnerability tagged as CVE-2023-38831. According to the study, Konni’s decision to focus on the cryptocurrency market was unusual; typically, North Korea’s notorious Lazarus …

If you are using Trend Micro Apex One, be aware that there may be a vulnerability in the third-party Antivirus uninstaller module. This vulnerability could potentially allow for arbitrary code execution. While the National Vulnerability Database (NVD) has not yet …

In November 2022, OpenAI launched ChatGPT, an AI-powered chatbot. It’s based on OpenAI’s GPT-3 family of big language models, and users interact with it via queries. An interactive online malware analysis sandbox ANY.RUN has recently introduced a new AI-driven detection approach. …

A high-severity cross-site scripting (XSS) vulnerability tracked as (CVE-2023-29183) affecting several FortiOS and FortiProxy versions has been patched by Fortinet. Additionally, the cybersecurity firm provided updates for a high-severity flaw in FortiWeb, tracked as  (CVE-2023-34984). “A cyber threat actor can exploit …

With Google Cloud, Google aims to change cybersecurity, particularly in security operations (SecOps), where overburdened teams battle with emerging threats with outdated methods and tools. Google focuses on cutting-edge ideas and solutions for effective security against emerging threats.  That’s why …

The suspected Pakistani group Transparent Tribe is known for targeting the military, diplomats, and now the Indian education sector.  While outside the Play Store, they distribute weaponized Android apps via self-run sites and social engineering tactics. The cybersecurity researchers at …

Data loss prevention (DLP) is a methodology and set of practices for protecting against and detecting data leaks, theft, or other unauthorized access. It filters data streams on corporate networks, analyzes endpoint activity, and classifies regulated, sensitive, and business-critical data. …

In recent developments within the notorious LockBit ransomware group, discussions among its affiliates are stirring up potential changes in their ransom payment policies.  LockBit has expressed increasing frustration over the inconsistency in ransom demands set by its affiliates. Currently, these …

In a recent incident, the Microsoft AI research team inadvertently exposed a staggering 38 terabytes of private data on their GitHub repository.  This exposure resulted from the misconfiguration of an Azure feature known as SAS tokens, which are used to …