LabHost group has been discovered to be targeting Canadian Banks with Phishing-as-a-service attacks. Phishing-as-a-service (PhaaS) groups have been on the rise due to multiple tools capable of multiple features, such …
How to Interpret the MITRE Engenuity ATT&CK® Evaluations For Enterprise
Thorough, independent tests are vital as cybersecurity leaders and their teams evaluate vendors’ abilities to guard against increasingly sophisticated threats to their organizations. And perhaps no assessment is more widely …
U.S. State Government Network Hacked Via Former Employee Account
CISA (Cybersecurity and Infrastructure Security Agency) and MS-ISAC (Multi-State Information Sharing and Analysis Center) have jointly disclosed that an unknown organization has attacked a state government organization’s network environment. As …
RansomHouse Automated Attacks Using Tool Dubbed MrAgent
The RansomHouse group recognized as a Ransomware-as-a-Service (RaaS), surfaced in the latter part of 2021 and has been actively utilizing ransomware variants to compromise corporate networks. RansomHouse ransomware employs phishing …
New Wi-Fi Authentication Bypass Flaw Puts Enterprise and Home Networks at Risk
Security researchers Mathy Vanhoef and Héloïse Gollier, have recently uncovered several critical vulnerabilities in the Wi-Fi authentication protocols used in modern WPA2/3 networks collaborating with VPN testing company Top10VPN. The …
What is .NET Malware Obfuscators? – Develop & Dismantle a Simple Obfuscator
The .NET malware obfuscators are tools used to obfuscate the source code of .NET applications, making it challenging for reverse engineers to understand and analyze the code. They rename variables, …
Zoom Desktop Flaws Let Attackers Launch Privilege Escalation Attacks
Zoom, a well-known video conferencing software, has patched seven vulnerabilities in its desktop and mobile applications, particularly a critical flaw identified as CVE-2024-24691 impacting Windows software. Notably, a high-severity escalation of privilege …
Chinese Hackers Attacking U.S. Critical Infrastructure Since 2023
VOLTZITE, a designated threat group, has been discovered by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which overlaps with the Volt Typhoon threat group. This particular threat actor has …
Wireshark 4.2.3 Released: What’s New!
Wireshark, the most popular network protocol analyzer worldwide, has released version 4.2.3, which includes new features and upgrades. Wireshark, a well-known open-source network protocol analyzer, enables users to view and …
Hackers Exploit YouTube Videos to Deliver Password Stealing Malware
Threat actors hunt for ways to exploit vulnerabilities by employing tactics from technical zero-days to broad phishing. Social engineering blends with commodity malware on high-traffic sites, like social media, that …