Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors Pierluigi Paganini December 05, 2024 Russia-linked APT group Secret Blizzard has used the tools…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding four critical vulnerabilities actively exploited in the wild, urging organizations to take…
Tenable released Tenable Patch Management, an autonomous patch solution built to close vulnerability exposures in a unified solution. A strategic partnership and integration with Adaptiva…
Dec 05, 2024Ravie LakshmananCyber Espionage / Malware The China-linked threat actor known as MirrorFace has been attributed to a new spear-phishing campaign mainly targeting individuals…
The Cybersecurity and Infrastructure Security Agency (CISA) recently updated its Known Exploited Vulnerabilities (KEV) Catalog, adding three critical vulnerabilities that are being actively exploited by…
A critical security flaw has been uncovered recently in the Thinkware Cloud APK version 4.3.46, Thinkware’s cloud-based dashcam services. The vulnerability, identified as CVE-2024-53614, allows…
China-linked APT Salt Typhoon has breached telcos in dozens of countries Pierluigi Paganini December 05, 2024 China-linked APT group Salt Typhoon has breached telecommunications companies…
Before diving into security controls or implementing bug bounty programs, to first establish a strong foundation in risk management and define your risk acceptance criteria.…
In a recent joint report by Microsoft Threat Intelligence and Black Lotus Labs, new insights have emerged about “Secret Blizzard,” a sophisticated Russian nation-state cyber…
The UK’s National Crime Agency (NCA) has disrupted two extensive Russian money laundering networks that operated across continents, aiding criminals worldwide, including notorious ransomware gangs.…
A sophisticated phishing campaign dubbed “Payroll Pirates” is currently targeting employees of various high-profile organizations. While the targets include California Employment Development Department (EDD), Kaiser…
Dec 05, 2024Ravie LakshmananVulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple security flaws affecting products from Zyxel, North Grid…
