Trend Research has identified Earth Lamia as an APT threat actor that exploits vulnerabilities in web applications to gain access to organizations, using various techniques for data exfiltration.\n...
Sophos MDR recently responded to a targeted attack involving a Managed Service Provider (MSP). In this incident, a threat actor gained access to the MSP’s remote monitoring and management (RMM) too...
In recent months, there has been a significant surge in crypto and investment scams exploiting the Tesla brand, particularly targeting cryptocurrency enthusiasts and investors. Scammers are capita...
Key Takeaways 251 malicious IPs, all hosted by Amazon and geolocated in Japan, launched a coordinated one-day scan on May 8. These IPs triggered 75 distinct behaviors, including CVE exploits, mis...
Summary The AIVD and MIVD (‘the Dutch services’) have identified a publicly unknown, highly probably Russian state-supported threat actor named LAUNDRY BEAR. LAUNDRY BEAR is responsible for co...
The full source code of SilverRAT, a notorious remote access trojan (RAT), has been leaked online briefly appearing on GitHub under the repository “SilverRAT-FULL-Source-Code” before being swiftly ...
Rewritten in Rust The family as it is known until now has been written in C#. Interestingly, we encountered a few recent malware samples written in Rust. The configuration options, the CnC communi...
The digital frontlines of the Israel-Gaza conflict have rapidly evolved into an active and persistent cyber battlefield. Over the past year, multiple pro-Palestinian threat groups, including Handal...
Seqrite Labs, India’s largest Malware Analysis lab, has identified multiple cyber events linked to Operation Sindoor, involving state-sponsored APT activity and coordinated hacktivist operations. O...
Memory Tagging Extension (MTE) is an advanced memory safety feature that is intended to make memory corruption vulnerabilities almost impossible to exploit. But no mitigation is ever completely air...
🚨 Credential-Stealing Crew Alert! A new threat has emerged as a credential-stealing crew is now spoofing VPN clients from major companies like Cisco and Fortinet. This malicious activity poses a s...
Introducing Betterleaks 🚀 We are excited to announce Betterleaks, a new open-source secrets scanner designed to replace Gitleaks! This innovative tool aims to enhance your security by scanning for...
Overview of Cloud Security Research Over the past two decades, cloud security has evolved significantly. 🌐 The research conducted during this time has paved the way for better practices and techno...
🚨 Payload Ransomware Attack Alert! The Royal Bahrain Hospital has reportedly fallen victim to a significant cyberattack, with the Payload Ransomware group claiming responsibility for the breach. T...
🚨 CrackArmor Vulnerabilities Alert! A critical security flaw has been discovered in CrackArmor, which allows local privilege escalation to root. This vulnerability poses a significant risk to syst...
🚨 AppsFlyer Web SDK Hijacked! Recently, it has come to light that the AppsFlyer Web SDK has been compromised to distribute crypto-stealing JavaScript code. This alarming development poses a signif...