Kriti Awasthi Hey there! I’m Kriti Awasthi, your go-to guide in the world of cybersecurity. When I’m not decoding the latest cyber threats, I’m probably lost in a book or brewing a perfect cup of coffee. My goal? To make… Read More "Tracking Cybercriminals: Digital Forensics Methodology Guide"
Mar 05, 2025Ravie LakshmananNetwork Security / Data Breach The China-lined threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology (IT) supply chain as a… Read More "China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access"
In late February, healthcare organizations across the US started receiving extortion demands by mail claiming that their organization’s data had been stolen in a ransomware attack and giving them 10 days to respond. According to the letters, printed on paper… Read More "Ransomware goes postal: US healthcare firms receive fake extortion letters"
A new shift in tactics by the Chinese espionage group Silk Typhoon, also known as Hafnium, has been identified by security researchers. According to Microsoft Threat Intelligence, the group is increasingly exploiting common IT solutions, such as remote management tools and… Read More "Silk Typhoon Shifts Tactics to Exploit Common IT Solutions"
%20(1).png?w=1140&resize=1140,855&ssl=1 "PSPF 001-2024: Safeguarding GovTech from Foreign Influence")
In 2024, the Australian government introduced PSPF Direction 001-2024 in recognition of the potential threats posed by Foreign Ownership, Control, or Influence (FOCI) on technology assets and GovTech (government technology operations). As part of the Protective Security Policy Framework (PSPF),… Read More "PSPF 001-2024: Safeguarding GovTech from Foreign Influence"
As well as being insecure, the DOGE website heavily leans on X, the social media platform owned by Musk. DOGE’s homepage is a feed of its own X posts, but it also uses code that directs search engines to X.com… Read More "The Official DOGE Website Launch Was a Security Mess"
/*! elementor – v3.22.0 – 26-06-2024 */ .elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block} DNS is the backbone of the internet, translating domain names into IP addresses to facilitate communication between devices. However, cybercriminals exploit DNS to create covert… Read More "Detecting and Controlling Hidden DNS Tunnel Attacks"
USB drive attacks constitute a significant cybersecurity risk, taking advantage of the everyday use of USB devices to deliver malware and circumvent traditional network security measures. These attacks lead to data breaches, financial losses, and operational disruptions, with lasting impacts… Read More "Defending against USB drive attacks with Wazuh"
Vault Panda and Envoy Panda are two groups that target government entities, but whereas Vault Panda is broad in its targeting, also going after financial services, gambling, technology, academic, and defense organizations, Envoy Panda seems focused on diplomatic entities, especially… Read More "Chinese cyber espionage growing across all industry sectors"
The vast majority of global IT professionals have experienced work-related stress or burnout, according to a new ISACA survey. The biggest drivers of this issue are heavy workload (54%), long hours (43%), tight deadlines (41%), lack of resources (41%), unsupportive… Read More "Stress and Burnout Impacting Vast Majority of IT Pros"
