Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The threat actor known asSpace Pirateshas been linked to attacks against at least 16 organizations in Russia and Serbia over the past year by employing novel t…
An analysis of the indicators of compromise (IoCs) associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-…
In what's a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 …
An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family calledRoyal.Tr…
Cross-site scripting (XSS) vulnerabilities were found in rainloop, a web-based email client, which could lead to information disclosure including passphrase le…
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting state bodies in the country as part of an espionage campaign.Th…
Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain init…
The threat actors behindRTM Lockerhave developed a ransomware strain that's capable of targeting Linux machines, marking the group's first foray into the open …
Days after the horrifying cyberattack, more details about the 3CX incident surface online as Mandiant…3CX Cyber Attack: It Was The Aftermath Of Another Supply-…
The adversary behind thesupply chain attack targeting 3CXdeployed a second-stage implant specifically singling out a small number of cryptocurrency companies.R…
2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 202…
The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer, in what's a sobering reminder of the dange…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasreleaseda new advisory aboutRoyal ransomware, which emerged in the threat landscape last ye…
The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL cont…
The U.S. Department of Health and Human Services (HHS) has cautioned of ongoing Royal ransomware attacks targeting healthcare entities in the country."While mo…
Researchers discovered a sophisticated supply-chain attack on chat service provider Comm100 that affected numerous companies.…Comm100 Chat Service Hacked In A …
Security researchers have found another strategy to steal data from air-gapped systems, this time exploiting…Researchers Discover SATA Cables Could Leak Data F…
A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment (SATA) or Serial ATA cables as a commu…
Researchers have reverse-engineered AstraLocker 2.0 ransomware targeting users via phishing campaigns. The attackers spread the…AstraLocker 2.0 Ransomware Spre…
The blockchain firm Harmony has recently suffered a devastating cyberattack. As confirmed, Harmony lost crypto…Blockchain Firm Harmony Lost $100 Million In Cyb…
Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-basedREvil ransomware grouphas been extradited to the U.S. to face charges for his role in carry…
UPDATE: It's worth noting that the malware Microsoft tracks as FoxBlade is the same as the data wiper that's been denominated HermeticWiper (aka KillDisk).Micr…
The threat actor behind the supply chain compromise of SolarWinds has continued to expand its malware arsenal with new tools and techniques that were deployed …
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around Octobe…
