Tag Archive

In a startling revelation, cyberattacks have surged to more than double their pre-pandemic levels, casting a long shadow over global financial stability. The International Monetary Fund (IMF) highlighted this alarming trend in its April 2024 Global Financial Stability Report, underscoring …

A product security incident response team (PSIRT) manages a vulnerability disclosure program by acting as a single point of contact for external reporters, including customers, partners, penetration testers, and security researchers.  They provide a standardized process for reporting security vulnerabilities …

Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and …

A mysterious bug has plagued a major tech company’s search engine project since February, randomly failing the index construction process. The issue is related to the code that merges partial indices during index building. “The search engine constructs the reverse …

ESET researchers have unveiled an espionage campaign called eXotic Visit. The campaign targets Android users by masquerading as benign messaging apps. This campaign, active since late 2021, cleverly disguises the open-source XploitSPY malware within seemingly functional messaging services. The primary …

Google has unveiled a significant upgrade to its enterprise browsing capabilities with the launch of Chrome Enterprise Premium. This new offering is designed to support endpoint security, providing a more robust defense mechanism for organizations navigating the complexities of modern …

Multiple vulnerabilities have been discovered in FortiOS and FortiProxy that were related to administrator cookie leakage, arbitrary command execution and sensitive information exposure. These vulnerabilities have been assigned with CVEs as CVE-2023-41677, CVE-2023-48784 and CVE-2024-23662. The severity for these vulnerabilities …

A sophisticated malvertising campaign is targeting system administrators across North America. The attackers are using fake ads for popular system utilities to distribute a dangerous strain of malware known as Nitrogen. Step 1: Luring Victims with Malicious Ads The campaign exploits the trust users place in search engine advertisements. By displaying sponsored search results for …

ANY.RUN’s Process Tree shows all the processes that start when a file or URL is run in its sandbox, along with their hierarchical relationships.This is accomplished by capturing the initial process initiated by the sample and any more processes it …