New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

24/10/2024 0 Comments 0 tags

Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

24/10/2024 0 Comments 0 tags

Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account takeover under specific circumstances. “The impact of

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

24/10/2024 0 Comments 0 tags

Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

24/10/2024 0 Comments 0 tags

Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance (ASA) that could lead to a denial-of-service (DoS) condition. The

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

24/10/2024 0 Comments 0 tags

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices.

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

24/10/2024 0 Comments 0 tags

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 (CVSS score: 9.8), the vulnerability is also

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

23/10/2024 0 Comments 0 tags

New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an effort to bypass anti-fraud measures, indicating that the malicious software is continuing to

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

23/10/2024 0 Comments 0 tags

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday, citing evidence of

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

23/10/2024 0 Comments 0 tags

Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizations are starting to realize that a shake-up

Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks

23/10/2024 0 Comments 0 tags

Threat actors have been observed abusing Amazon S3 (Simple Storage Service) Transfer Acceleration feature as part of ransomware attacks designed to exfiltrate victim data and upload them to S3 buckets