A novel information-stealing campaign detailing the attackers’ tactics, techniques, and procedures (TTPs) throughout the attack lifecycle, where the Mitre ATT&CK framework is used to classify these TTPs and identify potential …
Google Chrome Patches Six High-Severity Vulnerabilities
Google has released a critical security update for its Chrome browser, addressing six high-severity vulnerabilities that could potentially lead to browser crashes and other serious security issues. The update, version …
AI-Powered Browsers Detecting Zero-Day Phishing Attacks in High Accuracy
Researchers have developed a real-time browser extension integrated with machine learning algorithms to detect phishing websites with remarkable accuracy. This innovative approach promises to enhance online security by identifying zero-day …
ShrinkLocker Uses Windows BitLocker Utility To Infect Computers
Hackers exploit the Windows BitLocker tool, as this utility offers a very powerful tool for selectively encrypting access to the system or data, which helps lock users out. Attackers can …
Critical Vulnerability in Trellix IPS Manager Flaw Allows Remote Code Execution
Trellix has patched a critical security vulnerability in its Intrusion Prevention System (IPS) Manager, tracked as CVE-2024-5671. This flaw, caused by insecure deserialization in certain workflows, could allow unauthenticated remote …
Top 10 Best SOC Tools In 2024
An organization’s SOC (Security Operations Center) monitors and analyzes network, system, and data security. The SOC tools detect, investigate, and respond to cybersecurity risks and incidents. Security analysts, incident responders, …
25 Best Managed Security Service Providers in 2024
A Managed Security Service Provider (MSSP) offers a wide range of services, from network security monitoring and threat detection to incident response and vulnerability assessments, and delivers its services using …
New Satanstealer Malware Steals Browser Cookies and Passwords
A new malware named “Satanstealer” has been identified, targeting browser cookies and passwords. The discovery was first reported by MonThreat, a prominent cybersecurity research group, via their official Twitter account. …
Microsoft Unveils Ways To Detect Compromised Devices In Your Organization
Microsoft has announced a new way to spot potentially hacked machines in your organization. Analysts may now easily identify, examine, and search for suspicious interactive processes running on “hidden desktops” …
Hackers Leveraging New Social Engineering To Run PowerShell And Install Malware
Hackers use social engineering as it focuses on the psychological rather than technological aspects of security flaws, consequently easily tricking users into surrendering their username and password, or executing tasks …