Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

As the accelerated adoption of gen AI brings significant risks, Secure by Design principles can help enterprises navigate this new technology securely.

The NGate malware discovered by ESET can relay data from victims’ stored payment cards via a malicious app installed on their Android phones to the attackers’ rooted Android devices.

North Korean groups exploited npm packages in coordinated attacks, targeting developers and cryptocurrency wallet browser extensions

BlackByte, linked to the Conti group, exploited VMware ESXi CVE-2024-37085 to control virtual machines

Threat actors are exploiting a vulnerability found in CCTV cameras used in critical infrastructure to spread a Mirai malware variant

Cyble’s latest report reveals critical ICS vulnerabilities, including CVE-2023-34873 in MOBOTIX cameras, highlighting urgent security concerns for August 2024.

Telegram's founder, Pavel Durov, was arrested on August 24, 2024, sparking global debate on free speech, privacy, and social media responsibility.

Telecom-based attacks such as SMS toll fraud and 2FA hijacking have evolved into a mainstream concern for CISOs.

The latest release of the Dragos Platform provide industrial and critical infrastructure organizations with complete and enriched view of their OT environment.

The Volt Typhoon hacking group has been caught exploiting a zero-day vulnerability in Versa Director servers..

The global Internet helps just about everything to scale more easily, including piracy and ad fraud.

Public-facing vulnerabilities, cloud sprawl, access to back-end servers are just a few of the challenges travel and hospitality companies must address.

The vulnerability carries nearly the highest score possible on the CVSS scale, at 9.8, impacting a system used by major companies around the world.

Threat actors are abusing Microsoft Sway to host QR Code phishing campaigns.

Ransomware attacks and email-based fraud account for 80% to 90% of all claims processed by cyber insurers, but a handful of cybersecurity technologies can help prevent big damages.

In a joint advisory, CISA and the FBI described the activity as a likely attempt by the group to monetize access to networks it already has compromised.

A host of security agencies have issued a warning over RansomHub in recent months, but what's behind the group's rise to prominence?

Cyber criminals are targeting the sensitive customer data UK law firms hold for ransomware attacks or blackmail