A widespread phishing campaign ongoing since May 2023 has been targeting organizations in various industries, including a major US energy company, threat intelligence firm Cofense…
Web servers are a prime target for threat actors due to their open and volatile nature. However, these servers must remain open to provide various…
The concerns raised by the United States regarding the use of TikTok on government-owned devices led to restrictions on its usage during the Trump administration.…
Aug 17, 2023THNMobile Security / Vulnerability Cybersecurity researchers have documented a novel post-exploit persistence technique on iOS 16 that could be abused to fly under…
7-Eleven Australia is set to deploy a computer vision-based system by startup Grabango in a selection of stores that will remove the need for customers…
The Rapid7 mid-year review of the threat landscape is not reassuring. Ransomware remains high, basic security defenses are not being used, security maturity is low,…
Ransomware attacks continue to grow both in sophistication and quantity. 2023 has already seen more ransomware attacks involving data exfiltration and extortion than all of…
The CryptoService function in the Cisco Duo Device Health Application for Windows has a vulnerability tracked as (CVE-2023-20229). This might allow a low-privileged attacker to…
Aug 17, 2023THNCryptojacking / Proxyjacking A new, financially motivated operation dubbed LABRAT has been observed weaponizing a now-patched critical flaw in GitLab as part of…
Toll Government and Defence is moving into the second and final phase of modernising and “fortifying” its IT environment, which has seen it become one…
I hope you’ve been doing well! Hacker Summer Camp This year was my first time in Vegas since the pandemic, and I even managed to…
Cisco on Wednesday announced security updates for several enterprise applications to patch high-severity vulnerabilities leading to privilege escalation, SQL injection, directory traversal, and denial-of-service (DoS).…
