Experts Unveil Exploit for Recent Windows Vulnerability Under Active Exploitation

08/06/2023 0 Comments 0 tags

Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems. The vulnerability,

Barracuda Urges Immediate Replacement of Hacked ESG Appliances

08/06/2023 0 Comments 0 tags

Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them. “Impacted ESG

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks

08/06/2023 0 Comments 0 tags

The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

08/06/2023 0 Comments 0 tags

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three

Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids’ Data on Xbox

08/06/2023 0 Comments 0 tags

Microsoft has agreed to pay a penalty of $20 million to settle U.S. Federal Trade Commission (FTC) charges that the company illegally collected and retained the data of children who

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

07/06/2023 0 Comments 0 tags

A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers. “The main purpose

New PowerDrop Malware Targeting U.S. Aerospace Industry

07/06/2023 0 Comments 0 tags

An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop. “PowerDrop uses advanced techniques to evade detection such as deception, encoding,

Winning the Mind Game: The Role of the Ransomware Negotiator

07/06/2023 0 Comments 0 tags

Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them. The Ransomware Industry Ransomware is an industry. As such,

Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability – Update Now!

06/06/2023 0 Comments 0 tags

Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild. Tracked as CVE-2023-3079, the vulnerability

5 Reasons Why IT Security Tools Don’t Work For OT

06/06/2023 0 Comments 0 tags

Attacks on critical infrastructure and other OT systems are on the rise as digital transformation and OT/IT convergence continue to accelerate. Water treatment facilities, energy providers, factories, and chemical plants