Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access

04/12/2024 0 Comments 0 tags

A critical security vulnerability has been disclosed in SailPoint’s IdentityIQ identity and access management (IAM) software that allows unauthorized access to content stored within the application directory. The flaw, tracked

Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses

04/12/2024 0 Comments 0 tags

Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses. “The ongoing attack evades

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

03/12/2024 0 Comments 0 tags

Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA). The vulnerability, tracked as CVE-2014-2120 (CVSS score:

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

03/12/2024 0 Comments 0 tags

The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

03/12/2024 0 Comments 0 tags

Cybersecurity researchers have disclosed a set of flaws impacting Palo Alto Networks and SonicWall virtual private network (VPN) clients that could be potentially exploited to gain remote code execution on

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

03/12/2024 0 Comments 0 tags

A newly discovered malware campaign has been found to target private users, retailers, and service businesses mainly located in Russia to deliver NetSupport RAT and BurnsRAT. The campaign, dubbed Horns&Hooves

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

02/12/2024 0 Comments 0 tags

Taiwanese entities in manufacturing, healthcare, and information technology sectors have become the target of a new campaign distributing the SmokeLoader malware. “SmokeLoader is well-known for its versatility and advanced evasion

A Guide to Securing AI App Development: Join This Cybersecurity Webinar

02/12/2024 0 Comments 0 tags

Artificial Intelligence (AI) is no longer a far-off dream—it’s here, changing the way we live. From ordering coffee to diagnosing diseases, it’s everywhere. But while you’re creating the next big

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25 – Dec 1)

02/12/2024 0 Comments 0 tags

Ever wonder what happens in the digital world every time you blink? Here’s something wild – hackers launch about 2,200 attacks every single day, which means someone’s trying to break

8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google Play

02/12/2024 0 Comments 0 tags

Over a dozen malicious Android apps identified on the Google Play Store that have been collectively downloaded over 8 million times contain malware known as SpyLoan, according to new findings