Tag Archive

Flax Typhoon is a cyber threat actor observed using legitimate software to gain unauthorized access to organizations in Taiwan. This group employs sophisticated techniques, including those previously associated with another actor known as “Storm-0558,” to infiltrate systems and extract sensitive …

A hacking forum post has surfaced, claiming that Oracle Corporation, a leading multinational computer technology company, has suffered a data breach. The alleged breach reportedly occurred in September 2024 and involved the exposure of 4,002 rows of employee information. The …

Apache Axis is a web service engine that provides the capability to add web service interfaces to web applications. It can function as a standalone application server and supports SOAP 1.1, SOAP 1.2, and the REST style of web services. …

Shells serve as user interfaces that allow interaction with an operating system’s services. They enable users to execute commands, run scripts, and manage files. Bind shells are among the most popular types of shells, particularly in remote administration and network …

Organizations must adopt proactive measures to safeguard their digital assets. One of the most effective strategies involves collaborating with red and blue teams in security testing engagements. While red teams simulate attacks to identify vulnerabilities, blue teams focus on defending …

Quishing, or QR code phishing, is rapidly evolving as threat actors adapt their tactics to bypass email security scanners. By incorporating QR codes into phishing campaigns, threat actors have added an additional layer of evasion, making it harder for traditional …

Researcher BushidoToken unveild a comprehensive tool matrix focused on Russian Advanced Persistent Threat (APT) groups has been unveiled. This project, inspired by the success of the Ransomware Tool Matrix, aims to catalog and analyze the tools commonly used by Russian …

Microsoft has announced that Windows Server Update Services (WSUS) will be deprecated with the forthcoming release of Windows Server 2025. This move is part of Microsoft’s ongoing efforts to streamline its server offerings by phasing out outdated features in favor …

RansomHub is well-known for its affiliate scheme and for employing methods to turn off or disable endpoint detection and response (EDR) to avoid discovery and extend its existence on hacked devices or networks. Experts discovered that Ransomhub integrated the EDRKillShifter …

Apple’s recent release of macOS 15, also known as Sequoia, has been causing significant disruptions to various security tools designed by prominent cybersecurity companies such as CrowdStrike, SentinelOne, Microsoft, and others. The issue, which has been reported on social media …