The National Cyber Security Centre (NCSC) of the United Kingdom has recently published a comprehensive set of guidelines designed to assist organizations in securely transitioning their Supervisory Control and Data …
133,000+ Vulnerable FortiOS/FortiProxy Instances : Exploitation Started
A critical security vulnerability has been identified in Fortinet’s FortiOS and FortiProxy, potentially affecting over 133,000 devices worldwide. The flaw, tracked as CVE-2024-21762, is an out-of-bounds write vulnerability that could …
Pentagon Received 50,000+ Vulnerability Reports Since November 2016
The Department of Defense (DoD) Cyber Crime Center (DC3) recently announced a significant milestone in its cybersecurity efforts. The processing of over 50,000 vulnerability reports since the inception of its …
Cisco Completes Acquisition of Splunk for $28 Billion
Cisco has officially completed its acquisition of Splunk for a staggering $28 billion. This strategic acquisition marks a milestone in Cisco’s journey. It promises to revolutionize how organizations leverage data …
87% of UK Organisations are Vulnerable to Cyberattacks : Microsoft AI Research
In a groundbreaking report released by Microsoft, in collaboration with Dr. Chris Brauer of Goldsmiths, University of London, an alarming 87% of UK organizations have been identified as vulnerable to …
WARNING: Hackers’ New Favorite Tool – Weaponized SVG Files!
Threat actors use SVG files in cyber-attacks because SVGs (Scalable Vector Graphic files) can contain embedded scripts, making them a vector for executing malicious code. Not only that even the …
LockBit Ransomware is Back From the Dead : Is Your SOC/DFIR Team Prepared?
Law enforcement disrupted LockBit ransomware operations in February, seizing infrastructure and their website. Regretfully, the victory appears to have been temporary. The gang’s leading members were not detained, and Operation …
Chinese APT Hackers Exploits Government Web & Exchange Servers
A new Advanced Persistent Threat (APT) campaign, dubbed Earth Krahang, has emerged with a focus on infiltrating government entities across the globe. This campaign, active since early 2022, has been …
Critical Zoom Clients Flaw Let Attackers Escalate Privileges
A vulnerability classified as improper input validation was found in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows that could potentially allow …
What is CNAPP ? How It Benefits for Multi-Cloud & Hybrid Infrastructure Protection
Multi-cloud and hybrid infrastructures are becoming the norm among enterprises nowadays. Around 9 in 10 companies use a multi-cloud strategy, while 8 in 10 adopt a hybrid. This is not …