Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The operators associated with the QakBot (aka QBot) malware have set up 15 new command-and-control (C2) servers as of late June 2023.The findings are a continu…
An internal developer portal can help you consolidate and evolve your security strategy.
According to recent reports, there have been instances of threat actors using malware called ''SkidMap'' to exploit vulnerable Redis systems.
Introduced in 1999, Microsoft Active Directory is the default identity and access management service in Windows networks, responsible for assigning and enforci…
An unknown threat actor is using a variant of the Yashma ransomware to target various entities in English-speaking countries, Bulgaria, China, and Vietnam at l…
Cybersecurity researchers have discovered a set of 11 living-off-the-land binaries-and-scripts (LOLBAS) that could be maliciously abused by threat actors to co…
Cybersecurity researchers have discovered a set of 11 living-off-the-land binaries-and-scripts (LOLBAS) that could be maliciously abused by threat actors to co…
A new malware campaign has been observed making use of malicious OpenBullet configuration files to target inexperienced cyber criminals with the goal of delive…
A security engineer at Linux distro maker SUSE has published an advisory for a flaw in the Mozilla VPN client for Linux that has yet to be addressed in a publi…
Scaling a software application successfully is no small feat. Like raising a child, it requires planning, having the right foundations, and being prepared to a…
By dеtеcting flaws and vulnеrabilitiеs in onlinе applications, Dynamic Application Sеcurity Tеsting - DAST -…3 Typеs of DAST Tools for Enhancing Application Sе…
In today's interconnected world, evolving security solutions to meet growing demand is more critical than ever. Collaboration across multiple solutions for int…
A group of academics has devised a "deep learning-based acoustic side-channel attack" that can be used to classify laptop keystrokes that are recorded using a …
VulnerableRedis serviceshave been targeted by a "new, improved, dangerous" variant of a malware called SkidMap that's engineered to target a wide range of Linu…
VulnerableRedis serviceshave been targeted by a "new, improved, dangerous" variant of a malware called SkidMap that's engineered to target a wide range of Linu…
Researchers have identified a new side-channel attack impacting all existing processors. Named “Collide+Power”, this side-channel…Collide+Power Attack: New Sid…
In an era where concerns about online privacy are at an all-time high, many individuals are seeking ways to reclaim control over their personal data. As a resp…
Researchers have discovered a new phishing campaign targeting Facebook accounts while exploiting a Salesforce zero-day.…Salesforce Zero-Day Flaw Exploited In F…
Managed Detection and Response (MDR) has emerged as a crucial solution for organizations looking to bolster their security measures. MDR allows businesses to o…
Threat actors are using an open-source rootkit calledReptileto target Linux systems in South Korea."Unlike other rootkit malware that typically only provide co…
Cybersecurity researchers have discovered a new high-severity security flaw in PaperCut print management software for Windows that could result in remote code …
A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, …
Several denial of service (DoS) and code execution vulnerabilities have been discovered in the Vim enhanced vi editor.
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
