Tag Archive

Phishing attacks are online scams in which hackers pretend to represent reliable organizations to trick victims into disclosing private information like passwords or credit card numbers. Attackers frequently use phony emails, texts, and websites to dupe victims into acting—such as …

White snake stealer, an info stealer which has enhanced features now able to target both Windows and Linux platforms posing a significant threat to user privacy and security.  Information stealers are created in such a way to infiltrate into computer …

According to recent reports, there have been two serious vulnerabilities found in the Trellis SIEM. These vulnerabilities could potentially allow malicious actors to execute unauthorized commands within the Enterprise Security Manager (ESM) of Trellix. This poses a considerable risk to …

DNS flaws are very common on web applications where the DNS resolvers are vulnerable to Kaminsky attacks. If threat actors are able to predict portions of a DNS query and the source ports, they can exploit these vulnerabilities and gain …

Recently, the cybersecurity researchers at ASEC (AhnLab Security Emergency Response Center) found that the operators of Crysis ransomware are actively utilizing the Venus ransomware in their operations. Both Crysis and Venus are well-known for targeting the remote desktop services that …

SASE is an emerging architecture integrating network security and wide-area networking (WAN) features into a unified cloud-based solution. SASE solutions promise to give modern enterprises comprehensive security, improved performance, and easier network management. Traditional security methodologies and network designs struggle …

Recently, it has been found by the security analysts at Deep Instinct that MuddyWater (aka Mango Sandstorm and Mercury), an Iranian state-backed group, has been using a new command-and-control framework since 2021 that is dubbed “PhonyC2.” PhonyC2, an actively developed …

The High School Changed Every Student’s Password to ‘Ch@ngeme!’ By Guru – July 1, 2023 In an attempt to reset the student’s passwords after a mistake in a cybersecurity audit, the Oak Park and River Forest (OPRF) High School reset …

The DPRK campaign is utilizing a recently updated version of Rustbucket malware to avoid being detected. This variant of RUSTBUCKET, targets macOS systems, adds persistence capabilities not previously observed and, at the time of reporting, is undetected by VirusTotal signature …