Threat intelligence feeds provide real-time updates on indicators of compromise (IOCs), such as malicious IPs and URLs. Security researchers and organizations share IOCs with feed vendors, who then analyze and …
YARA, the Malware Researchers Toolbox Evolved
Malware experts all over the world can’t do their jobs without YARA. YARA has been updated many times to add new features and fix a huge number of bugs. It …
SugarGh0st RAT Attacking Organizations & Individuals in AI Research
The cybersecurity company Proofpoint has found a new operation using the SugarGh0st Remote Access Trojan (RAT) that is going after AI research organizations in the United States. The operation, linked …
New Cyber Attack Targeting Facebook Business Accounts
The email campaign impersonates the Facebook Ads Team to trick users into clicking a malicious link, as the email leverages social engineering tactics like sender name spoofing and urgency to …
CISA Reveals Guidance For Implementation of Encrypted DNS Protocols
“Encrypted DNS Implementation Guidance,” a detailed document from the Cybersecurity and Infrastructure Security Agency (CISA), tells government agencies how to improve their cybersecurity by using encrypted Domain Name System (DNS) …
Two Brothers Arrested for Attacking Blockchain & Stealing $25M
Jason Peraire-Bueno, 28, of New York, and Anton Peraire-Bueno, 24, of Boston have been charged with wire fraud, plot to commit wire fraud, and conspiracy to commit money laundering. The …
Microsoft to Mandate Multi-Factor Authentication for All Azure Users
Microsoft has said that all Azure users will have to use multi-factor authentication (MFA) starting in July. This is a big step to make the cloud safer. This project is …
Darkgate Malware Weaponizing XLSX, HTML And PDF To Attack Windows Machines
Hackers often target XLSX, HTML, and PDF files as they are widely used, and their trustable file formats also attract them. This makes it easier to deliver them successfully to …
Top 10 Best Managed Service Providers (MSP) for CISO, CTO & IT Managers – 2024
MSP or managed service providers, is an application designed to streamline the delivery and management of IT services to multiple customers. It is a centralized platform that automates administrative tasks …
PoC Exploit Released for Ivanti EPMM MobileIron Core
A newly disclosed vulnerability, CVE-2024-22026, has been found in Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core. This vulnerability allows a local attacker to gain root access to affected systems. …