Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

11/11/2024 0 Comments 0 tags

Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning (ML) related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

11/11/2024 0 Comments 0 tags

Hewlett Packard Enterprise (HPE) has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The

Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware

11/11/2024 0 Comments 0 tags

Cybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT. Remcos RAT “provides purchases with a wide range of

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

09/11/2024 0 Comments 0 tags

Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability.

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

09/11/2024 0 Comments 0 tags

The 36-year-old founder of the Bitcoin Fog cryptocurrency mixer has been sentenced to 12 years and six months in prison for facilitating money laundering activities between 2011 and 2021. Roman

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

08/11/2024 0 Comments 0 tags

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. “This botnet utilizes

The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

08/11/2024 0 Comments 0 tags

We’ve all heard a million times: growing demand for robust cybersecurity in the face of rising cyber threats is undeniable. Globally small and medium-sized businesses (SMBs) are increasingly targeted by

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

08/11/2024 0 Comments 0 tags

A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with open-source stealer malware such as Skuld and Blank-Grabber. “This

IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

08/11/2024 0 Comments 0 tags

High-profile entities in India have become the target of malicious campaigns orchestrated by the Pakistan-based Transparent Tribe threat actor and a previously unknown China-nexus cyber espionage group dubbed IcePeony. The

Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

08/11/2024 0 Comments 0 tags

Let’s face it—traditional security training can feel as thrilling as reading the fine print on a software update. It’s routine, predictable, and, let’s be honest, often forgotten the moment it’s