Restoring SOC Team Confidence Amid Waves of False Positives
Imagine you’re a performer at a circus. You’re juggling balls, pins, torches, and the occasional chainsaw, all while blindfolded. Shouts from the crowd are coming…
Month: January 2025
Broadcom fixed information disclosure flaws in VMware Aria Operations
Broadcom fixed information disclosure flaws in VMware Aria Operations Pierluigi Paganini January 31, 2025 Broadcom patched five flaws in VMware Aria Operations and Aria Operations…
Malware Found in Healthcare Patient Monitors Linked to Chinese IP Address
A critical cybersecurity vulnerability has been uncovered in Contec CMS8000 patient monitors, revealing embedded malware that poses significant risks to patient safety and data security.…
D-Link Routers Vulnerability Let Attackers Gain Full Router Control Remotely
A critical unauthenticated Remote Code Execution (RCE) vulnerability has been affecting DSL-3788 routers, allowing attackers to acquire complete control over the router remotely. The flaw…
Microsoft to Boost M365 Bounty Program With New Products & Rewards Up to $27,000
A significant extension of Microsoft’s Microsoft 365 (M365) Bounty Program has been announced. The program now includes new Viva products under its scope for identifying…
Is data minimization the new data ethics in subscription management?
Data could be your biggest asset but it could also be your weakest link. The more you collect, the more there is to be guarded,…
Infosec products of the month: January 2025
Here’s a look at the most interesting products from the past month, featuring releases from: Absolute Security, Atsign, authID, BackBox, BioConnect, BitSight, BreachLock, Cisco, Commvault,…
Authorities Take Down Cracked & Nulled Hacking Forums Used by 10 Million Users
In a law enforcement operation dubbed “Operation Talent,” an international coalition of law enforcement agencies led by Germany’s Bundeskriminalamt (BKA) and Europol has dismantled two…
5 cybersecurity practices for custom software development
Whether you are going to build a custom CRM system, custom ERP tool, or any other bespoke solution, you need to ensure that this software…
Nine out of ten emails are spam
Now, more than ever, users can fall prey to word-perfect AI-created phishing campaigns, subtle BEC messages that sound remarkably like the sender, and highly convincing…
Windows Vulnerability in COM Objects Let Attackers Trigger Remote Command Execution
James Forshaw of Google Project Zero has shed light on a significant security vulnerability in Windows related to accessing trapped COM objects through the IDispatch…
Massive Hacking Forum Network Dismantled by Authorities, Impacting 10M Users
Authorities have delivered a major blow to the cybercrime world by dismantling two of the largest hacking forums globally—Cracked.io and Nulled.to—bringing down platforms that catered…