Tag Archive

Microsoft has unveiled the automatic rollout of multifactor authentication (MFA)-related Conditional Access policies in Entra ID, marking a pivotal step in the company’s Secure Future Initiative. This initiative aims to enhance customer security measures in anticipation of escalating cyber threats. …

Reserve Bank of India (RBI) has warned against the dangers of “juice jacking,” a cyberattack targeting mobile users who charge their devices at public USB ports. This advisory underscores the growing threat cybercriminals pose in public spaces such as airports, …

A new Linux variant of Bifrost, dubbed Bifrose, was observed exhibiting a creative way to avoid detection, such as using a deceptive domain that imitates the official VMware domain. Bifrost is a remote access Trojan (RAT) that was first discovered in 2004. It is …

Threat actors exploit Linux malware due to the widespread use of Linux servers in critical infrastructure and web hosting.  Linux’s prevalence makes it an attractive target for cybercriminals seeking to compromise systems, steal data, or launch distributed denial-of-service (DDoS) attacks. …

The Lazarus threat group has been exploiting a Microsoft vulnerability associated with Windows Kernel Privilege Escalation to establish a kernel-level read/write primitive. This vulnerability was previously unknown which exists in the appid.sys AppLocker driver. This vulnerability has been assigned with …

A recent report by security firm Apiiro has revealed that a “repo confusion” attack has compromised more than 100,000 repositories on GitHub. This type of attack involves exploiting a flaw in the way that Git, the version control system used …

The Common Weakness Enumeration (CWE) project, a community-developed list of common software and hardware weakness types, has announced the release of version 4.14. This latest version introduces significant updates and improvements, including new entries and a new view that enhances …

HackerGPT is an advanced AI tool created specifically for the cybersecurity industry, handy for individuals engaged in ethical hacking and cyber security research like bug bounty hunters. This sophisticated assistant is at the forefront of cyber intelligence, providing an extensive …