Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft on Wednesday revealed that a China-based threat actor known asStorm-0558acquired the inactive consumer signing key to forge tokens and access Outlook…
A new phishing attack likely targeting civil society groups in South Korea has led to the discovery of a novel remote access trojan calledSuperBear.The intrusi…
The North Korea-linked threat actor known as Lazarus Group has been observed exploiting a now-patched critical security flaw impacting Zoho ManageEngine Servic…
A new remote access trojan “QwixxRAT” has caught the security researchers’ attention while targeting Windows…New QwixxRAT Windows Malware Spreads Through Teleg…
Microsoft on Thursday disclosed that it found a new version of theBlackCatransomware (aka ALPHV and Noberus) that embeds tools like Impacket and RemCom to faci…
Introduced in 1999, Microsoft Active Directory is the default identity and access management service in Windows networks, responsible for assigning and enforci…
A new malware campaign has been observed making use of malicious OpenBullet configuration files to target inexperienced cyber criminals with the goal of delive…
A deeper analysis of a recently discovered malware calledDecoy Doghas revealed that it's a significant upgrade over thePupy RAT, an open-source remote access t…
Ivanti is warning users to update their Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core) to the latest version that …
The recent attack againstMicrosoft's email infrastructureby a Chinese nation-state actor referred to as Storm-0558 is said to have a broader scope than previou…
Government entities, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns designed to steal sen…
Remote unauthenticated attacker may redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. (CVE-…
VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize Network Insight) has com…
A heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function …
Two "dangerous" security vulnerabilities have been disclosed in Microsoft Azure Bastion and Azure Container Registry that could have been exploited to carry ou…
Multiple vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privile…
A new security flaw has been disclosed in the Google Cloud Platform's (GCP) Cloud SQL service that could be potentially exploited to obtain access to confident…
A nascent botnet calledAndoryuhas been found toexploita now-patched critical security flaw in the Ruckus Wireless Admin panel to break into vulnerable devices.…
Remote Access Trojans (RATs) have taken the third leading position in ANY. RUN'sQ1 2023 reporton the most prevalent malware types, making it highly probable th…
The maintainers of theApache Supersetopen source data visualization software have released fixes to plug an insecure default configuration that could lead to r…
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
The cyber espionage actor tracked asBlind Eaglehas been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan…
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffe…
Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems.Thebreachis said …
