Tag Archive

The Lazarus threat group has been exploiting a Microsoft vulnerability associated with Windows Kernel Privilege Escalation to establish a kernel-level read/write primitive. This vulnerability was previously unknown which exists in the appid.sys AppLocker driver. This vulnerability has been assigned with …

A recent report by security firm Apiiro has revealed that a “repo confusion” attack has compromised more than 100,000 repositories on GitHub. This type of attack involves exploiting a flaw in the way that Git, the version control system used …

The Common Weakness Enumeration (CWE) project, a community-developed list of common software and hardware weakness types, has announced the release of version 4.14. This latest version introduces significant updates and improvements, including new entries and a new view that enhances …

HackerGPT is an advanced AI tool created specifically for the cybersecurity industry, handy for individuals engaged in ethical hacking and cyber security research like bug bounty hunters. This sophisticated assistant is at the forefront of cyber intelligence, providing an extensive …

In cybersecurity, information is what ultimately makes it possible to respond to threats effectively and proactively. One of the most efficient ways to collect it is by using threat intelligence platforms. By providing threat context and enrichment, they enable analysts …

Stellar Cyber, the innovator of Open XDR, today announced that RSM US – the leading provider of professional services to the middle market – is leveraging the Stellar Cyber Open XDR platform to unify, expand and control the cybersecurity defenses across its Global …

A new Remote Access Trojan (RAT) named DashExe is advertised on underground hacking forums. The software is touted as a “Customizable spreading software to boost bot success,” indicating its potential use for managing and spreading malicious software across infected systems. …

Threat actors use ZIP files to weaponize them since they can easily convey malicious payloads within compressed archives, making it difficult for security systems to detect and study the file’s contents.  These files can be used to deliver multiple files …