In the digital graveyard, a new threat stirs: Out-of-support devices becoming thralls of malicious actors 27 Aug 2024 • , 4 min. read Outdated devices are often easy targets for attackers, especially if they have vulnerabilities that can be exploited… Read More "The risks of unsupported IoT tech"
Third-party attacks emerged as a significant driver of material financial losses from cyber incidents in 2024, according to cyber risk management firm Resilience. Third-party risks made up 31% of all client insurance claims and 23% of material losses last year.… Read More "Third-Party Attacks Drive Major Financial Losses in 2024"
CVE-2024-0204, a critical authentication bypass vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, allows unauthorized users to create admin users and bypass authentication requirements. GoAnywhere MFT was previously targeted in cyberattacks by the Cl0p ransomware group with the zero-day… Read More "Hackers Ready to Go Anywhere with Critical Vulnerability in GoAnywhere MFT (CVE-2024-0204)"
Signature-based Detection Traditional signature-based detection remains fundamental in identifying Cobalt Strike beacons. These signatures focus on specific characteristics within network traffic, such as default certificate configurations, known beacon intervals, and distinctive HTTP request patterns. Security platforms analyze packet metadata, looking… Read More "Top strategies to detect and prevent cobalt strike"
Feb 28, 2025Ravie LakshmananAPI Security / AI Security Microsoft on Thursday unmasked four of the individuals that it said were behind an Azure Abuse Enterprise scheme that involves leveraging unauthorized access to generative artificial intelligence (GenAI) services in order to… Read More "Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme"
Hacker haben sich Zugriff auf Daten von Tausenden Patienten aus Hamburg verschafft. Inactive design – Shutterstock.com Laut einem Bericht des Hamburger Abendblatt wurde das Praxisinformationssystem der MVZ Herz-Lungen-Praxis Hamburg-Bergedorf angegriffen, eine Tochter der renommierten LungenClinic Grosshansdorf. Demnach ist es den… Read More "Hacker verschlüsseln Daten von rund 12.000 Patienten"
ESET researchers discovered a code execution vulnerability in WPS Office for Windows (CVE-2024-7262), as it was being exploited by APT-C-60, a South Korea-aligned cyberespionage group. Upon analyzing the root cause, we subsequently discovered another way to exploit the faulty code… Read More "Analysis of two arbitrary code execution vulnerabilities affecting WPS Office"
Following a busy January, the cybersecurity M&A market remained active in February 2025, with several key mergers and acquisitions (M&As) announced. The month saw continued consolidation in cloud security, API security, and identity access management. Large acquisitions by Sophos and… Read More "Cybersecurity M&A Roundup: SolarWinds Acquired for $4.4bn"
The explosion of AI has led to the creation of tools that make it more accessible, leading to more adoption and more numerous, less sophisticated users. As with cloud computing, that pattern of growth leads to misconfigurations and, ultimately, leaks.… Read More "Using Exposed Ollama APIs to Find DeepSeek Models"
A dataset used to train large language models (LLMs) has been found to contain nearly 12,000 live secrets, which allow for successful authentication. The findings once again highlight how hard-coded credentials pose a severe security risk to users and organizations… Read More "12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training"
