Tag Archive

Threat actors exploit Microsoft Defender SmartScreen zero-day flaws to circumvent the security mechanisms designed to protect users from malicious websites and downloads.  By leveraging these vulnerabilities, threat actors can evade detection, gain unauthorized access, and execute potentially harmful actions. Cybersecurity …

Threat actors of Iranian origin, CharmingCypress (also known as Charming Kitten, APT42, TA453), have gathered political intelligence against international targets, with a special emphasis on journalists, think tanks, and NGOs. CharmingCypress frequently uses novel social-engineering techniques in its phishing efforts, …

Glupteba, a decade-old malware in financial cybercrime, unveiled a new campaign in November 2023.  Despite its long tenure, the undiscovered features include a UEFI bootkit that allows stealthy persistence, challenging detection, and removal. Security analysts at Palo Alto Networks recently …

Secure Network as a Service (SNaaS) for Managed Service Providers (MSPs) delivers networking and security services to clients via the cloud, integrating networking advantages with complete protection. This strategy allows MSPs to provide clients with scalable, adaptable, and secure networking …

Malware sandbox leader ANY.RUN introduced the Threat Intelligence Lookup platform that helps security researchers find the relevant threat data from the sandbox tasks of ANY.RUN. The platform aids in identifying and studying various types of malware by improving the incident …

The Canadian government has banned Flipper Zero, a compact and customizable hacking tool, citing concerns over its potential use in automotive theft. At a recent summit, François-Philippe Champagne, Canada’s Minister of Innovation, Science and Industry, announced a ban on criminals …

CISA, the Cybersecurity and Infrastructure Security Agency, has issued a warning regarding a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail that is currently being targeted by attackers in the wild. Threat actors are currently taking advantage of a security flaw …

Network security providers for education safeguard schools, colleges, and educational institutions against cyberattacks. These providers protect student, research, and administrative data, comply with legal and regulatory requirements, and provide a secure learning environment. In education, digital learning tools, online courses, …

Ivanti Connect Secure was previously discovered with another SSRF vulnerability that could allow unauthenticated threat actors to access unrestricted resources due to a flaw in the SAML module. The vulnerability was assigned with CVE-2024-21893, and the severity was 8.2 (High).  …