MSP/MSSP Security Strategies for 2025
The 2024 State of the vCISO Report continues Cynomi’s tradition of examining the growing popularity of virtual Chief Information Security Officer (vCISO) services. According to…
Author: Cybernoz
Linux Pluggable Authentication Modules Abused to Create Backdoors
The Group-IB Digital Forensics and Incident Response (DFIR) team has uncovered a novel technique that exploits Linux’s Pluggable Authentication Modules (PAM) to create persistent backdoors…
China dominates AI and advanced analytics research
The Australian Strategic Policy Institute’s (ASPI) latest technology tracker paints a bleak picture of the artificial intelligence (AI) and advanced analytics strengths of Western countries…
Tewkesbury Borough Council Cyberattack: Incident Update
Tewkesbury Borough Council has declared a major incident following a cyberattack that disrupted its operations on Wednesday afternoon. The Tewkesbury Borough Council prompted the council…
SonicWall Warns of Access Control Vulnerability Exploited in the Wild
SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw…
Resecurity gains recognition in Frost & Sullivan’s 2024 Cyber Threat Intelligence report
Resecurity announced its recognition in the prestigious Frost & Sullivan’s Global Cyber Threat Intelligence 2024 report. This annual report is an essential indicator of market…
How To Mitigate Cybersecurity Threats: A Comprehensive Guide
From small businesses to giant corporations, sophisticated cyberattacks are not just prevalent but effective at crippling data and services. To safeguard your business against these…
Apache fixed a new remote code execution flaw in Apache OFBiz
Apache fixed a new remote code execution flaw in Apache OFBiz Pierluigi Paganini September 06, 2024 Apache addressed a remote code execution vulnerability affecting the…
Exploitation of Exchange PowerShell via MultiValuedProperty
OffensiveCon 2024 devised multiple methods to exploit Microsoft Exchange. One method was using the MultiValuedProperty, through which a researcher was able to exploit Exchange PowerShell.…
CIRCOR Faces SEC Charges Over Internal Control Failures
The US Securities and Exchange Commission (SEC) has accused a former CIRCOR executive of misleading financial disclosures. The allegations revolve around false statements made regarding…
Critical Progress LoadMaster Vulnerability – Attackers Execute Arbitrary Code
A critical vulnerability has been identified in the LoadMaster product line, including all LoadMaster releases and the LoadMaster Multi-Tenant (MT) hypervisor. This vulnerability, which is…
Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress
Sep 06, 2024Ravie LakshmananWordPress / Webinar Security Cybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could…