Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The ransomware strain known as Play is now being offered to other threat actors "as a service," new evidence unearthed by Adlumin has revealed."The unusual lac…
Android smartphone users in India are the target of a new malware campaign that employs social engineering lures to install fraudulent apps that are capable of…
The stealer malware known as LummaC2 (aka Lumma Stealer) now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to…
The threat actors behind the8Base ransomwareare leveraging a variant of the Phobos ransomware to conduct their financially motivated attacks.The findings come …
In 2023, the global average cost of a data breach reached$4.45 million. Beyond the immediate financial loss, there are long-term consequences like diminished c…
The threat actors behind a new ransomware group calledHunters Internationalhave acquired the source code and infrastructure from the now-dismantled Hive operat…
Effective marketing operations today are driven by the use of Software-as-a-Service (SaaS) applications. Marketing apps such as Salesforce, Hubspot, Outreach, …
A new variant of theGootLoader malwarecalled GootBot has been found to facilitate lateral movement on compromised systems and evade detection."The GootLoader g…
Numerous industries—including technology, financial services, energy, healthcare, and government—are rushing to incorporate cloud-based and containerized web a…
Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ.Cybersecurity firm Rapid7saidit …
Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to dep…
Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to dep…
An advanced strain of malware masquerading as a cryptocurrency miner has managed to fly the radar for over five years, infecting no less than one million devic…
Google is rolling out an "Independent security review" badge in the Play Store'sData safety sectionfor Android apps that have undergone a Mobile Application Se…
The threat actors linked toKinsinghave been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as par…
Compromised Facebook business accounts are being used to run bogus ads that employ "revealing photos of young women" as lures to trick victims into downloading…
This new product offers SaaS discovery and risk assessment coupled with a free user access review in a unique “freemium” modelSecuring employees' SaaS usage is…
The Forum of Incident Response and Security Teams (FIRST) has officially announcedCVSS v4.0, the next generation of the Common Vulnerability Scoring System sta…
The browser has become the main work interface in modern enterprises. It’s where employees create and interact with data, and how they access organizational an…
F5 is warning of active abuse of a critical security flaw in BIG-IP less than a week after its public disclosure, resulting in the execution of arbitrary syste…
A pro-Hamas hacktivist group has been observed using a new Linux-based wiper malware dubbedBiBi-Linux Wiper, targeting Israeli entities amidst the ongoing Isra…
Three unpatched high-severity security flaws have been disclosed in theNGINX Ingress controllerfor Kubernetes that could be weaponized by a threat actor to ste…
A new cyber attack campaign has been observed using spuriousMSIXWindows app package files for popular software such as Google Chrome, Microsoft Edge, Brave, Gr…
The Iranian threat actor known asTortoiseshellhas been attributed to a new wave of watering hole attacks that are designed to deploy a malware dubbed IMAPLoade…
