CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

16/03/2023 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The

YoroTrooper Stealing Credentials and Information from Government and Energy Organizations

15/03/2023 0 Comments 0 tags

A previously undocumented threat actor dubbed YoroTrooper has been targeting government, energy, and international organizations across Europe as part of a cyber espionage campaign that has been active since at least June

New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining

15/03/2023 0 Comments 0 tags

Cybersecurity researchers have discovered the first-ever illicit cryptocurrency mining campaign used to mint Dero since the start of February 2023. “The novel Dero cryptojacking operation concentrates on locating Kubernetes clusters

The Different Methods and Stages of Penetration Testing

15/03/2023 0 Comments 0 tags

The stakes could not be higher for cyber defenders. With the vast amounts of sensitive information, intellectual property, and financial data at risk, the consequences of a data breach can

Tick APT Targeted High-Value Customers of East Asian Data-Loss Prevention Company

15/03/2023 0 Comments 0 tags

A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention (DLP) company that caters to government and military entities.

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

15/03/2023 0 Comments 0 tags

Microsoft’s Patch Tuesday update for March 2023 is rolling out with remediations for a set of 80 security flaws, two of which have come under active exploitation in the wild. Eight

The Prolificacy of LockBit Ransomware

14/03/2023 0 Comments 0 tags

Today, the LockBit ransomware is the most active and successful cybercrime organization in the world. Attributed to a Russian Threat Actor, LockBit has stepped out from the shadows of the

Microsoft Warns of Large-Scale Use of Phishing Kits to Send Millions of Emails Daily

14/03/2023 0 Comments 0 tags

An open source adversary-in-the-middle (AiTM) phishing kit has found a number of takers in the cybercrime world for its ability to orchestrate attacks at scale. Microsoft Threat Intelligence is tracking

Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities

14/03/2023 0 Comments 0 tags

Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result in data loss and OS and

GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks

14/03/2023 0 Comments 0 tags

A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into a botnet. “GoBruteforcer chose a Classless Inter-Domain Routing (CIDR)