Key Cloud Security Tools for 2024: A Comprehensive Overview
As cloud computing continues to evolve and integrate deeply into business operations, the need for robust cloud security tools becomes increasingly critical. With new threats…
Month: August 2024
CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature
Aug 09, 2024Ravie LakshmananVulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed that threat actors are abusing the legacy Cisco…
ADT Data Breach Confirmed: Thousands Of Customers Impacted
American building security giant ADT has confirmed that it experienced a cybersecurity incident after threat actors leaked allegedly stolen customer data on a popular hacking…
MongoDB Flaw Allows Attackers to Gain Complete Control of Windows Systems
A critical vulnerability, identified as CVE-2024-7553, has been discovered in MongoDB. It could potentially allow attackers to take complete control of Windows systems. This vulnerability…
The Olympic Games have been protected from cyber-attacks so far
The expectation of cyberattacks targeting the Olympic Games was widespread. Earlier this year, Mandiant released a report identifying likely attackers as nation-state-affiliated groups from Russia,…
Shorter TLS certificate lifespans expected to complicate management efforts
76% of security leaders recognize the pressing need to move to shorter certificate lifespans to improve security, according to Venafi. However, many feel unprepared to…
Hackers Exploit Cisco Smart Install Vulnerability: CISA Warns
In a recent advisory, the Cybersecurity and Infrastructure Security Agency (CISA) has highlighted growing concerns regarding the exploitation of vulnerabilities in Cisco devices. The Cisco…
How to access the Dark Web using the Tor Browser
The dark web refers to websites that are not on the regular internet but are instead hidden in a private network that is only accessible…
Confusion Attacks in Apache HTTP Server Let Attackers Gain Root Access Remotely
A recent research presentation at Black Hat USA 2024 revealed architectural vulnerabilities within the Apache HTTP Server, a widely used web server software. The research…
NIS2: A catalyst for cybersecurity innovation or just another box-ticking exercise?
The Network and Information Security (NIS) 2 Directive is possibly one of the most significant pieces of cybersecurity regulation to ever hit Europe. The 27…
Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals
The sophistication of cyber threats has escalated dramatically, with malicious actors’ deploying advanced tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection, according…
Where internal audit teams are spending most of their time
Over half of key stakeholders including audit committees, company boards, and chief financial officers are looking to internal audit teams to take on more risk-related…