Tag Archive

In a startling revelation, Marina Bay Sands, Singapore’s renowned architectural marvel and a coveted global tourist destination, has fallen victim to a data breach that has sent shockwaves through its loyal clientele.  The breach, which occurred on October 19 and …

Lenovo has disclosed multiple BIOS security vulnerabilities affecting several vendors in their new security advisory. The potential impacts of these vulnerabilities could be Information Disclosure and Arbitrary code execution on multiple BIOS vendors.  Moreover, the scope of impact for these …

SideCopy, the Pakistani-based threat actor, has been using the WinRAR vulnerability (CVE-2023-38831) to target Indian government entities for delivering multiple RATs (Remote Access Trojans) like AllaKore RAT, Ares RAT, and DRat. The threat actor has been observed to have conducted …

Recently, security researchers have discovered that cybercriminals are distributing harmful Python packages that are camouflaged as genuine obfuscation tools, but in reality, they contain malicious code. These packages are being used by threat actors to spread malware and launch cyber …

Recently, two significant vulnerabilities related to memory corruption have been uncovered in the popular VLC media player. These vulnerabilities were found in the Microsoft Media Server (MMS), which has two implementations in VLC: MMS over TCP (MMST) and MMS over …

Cyber forensic tools play a crucial role in cyber investigations by helping investigators collect, analyze, and preserve digital evidence.  These tools can extract data from various sources, such as:- Hard drives Mobile devices Network traffic They also allow for identifying …

Threat actors can potentially exploit ChatGPT to generate convincing phishing emails or deceptive content encouraging users to download malware.  They may also use the model to obfuscate malicious code or to assist in social engineering attacks, making it more challenging …

It is getting better and better that modern security tools can protect companies’ networks and endpoints from hackers. But sometimes, bad people still find a way in. Security teams need to be able to stop risks and get things back …

Google Calendar RAT (GCR) is a proof of concept for Command & Control (C2) via Google Calendar Events. It’s useful when setting up a full red team infrastructure is challenging. GCR needs a Gmail account, using event descriptions in Google …

Threat intelligence is essential for cybersecurity, as it provides organizations with a clear view of the current threat landscape and enables them to adapt their defenses accordingly. While there are many ways to gather threat intelligence, crowdsourcing stands as one …