The state-sponsored cybersecurity threat group known as APT37 has been observed carrying out sophisticated reconnaissance activities against South Korean targets. The group, believed to be…
Password spraying is a type of brute force attack where an attacker attempts to access multiple user accounts by trying a small number of common…
Figuring out SOC pricing doesn’t have to be overwhelming. I’ve been there—facing the question of “How much should we spend on security?” You’re not alone.…
AV, anti-malware, and EDR are tools that are primarily used to detect and prevent cyber-attacks. While the AV/EDR bypass tools are designed to evade detection…
QNAP Systems, Inc., a leading provider of network-attached storage (NAS) and networking solutions, has released a critical security update for its QuRouter devices, addressing a…
Recent security bulletins have disclosed high-severity vulnerabilities in MediaTek smartphone chipsets, which could enable attackers to escalate privileges and gain unauthorized access to the affected…
A critical security vulnerability has been discovered in pfSense version 2.5.2, potentially allowing attackers to execute arbitrary code on affected systems. The flaw, identified as…
Okta, a leading identity and access management company, has patched a critical vulnerability in its Verify agent for Windows that could allow attackers to steal…
Infostealer malware is a type of malicious software designed to infiltrate computer systems and extract sensitive information. Once the data is collected, it is sent…
NCSC researchers have uncovered a sophisticated backdoor dubbed “Pygmy Goat” that was deployed on compromised Sophos XG firewall devices. The malware, discovered by the National…
Over 280 malicious typosquat packages have been unearthed in an ongoing campaign targeting JavaScript developers using the popular npm (Node Package Manager) ecosystem. The attack, which began in late…
A critical vulnerability in the Opera web browser has been discovered that could allow malicious extensions to gain unauthorized access to private APIs, potentially leading…
