The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users,… Read More "Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT"
Nov 17, 2025Ravie LakshmananVulnerability / Mobile Security Google has disclosed that the company’s continued adoption of the Rust programming language in Android has resulted in the number of memory safety vulnerabilities falling below 20% of total vulnerabilities for the first… Read More "Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time"
Nov 15, 2025Ravie LakshmananMalware / Vulnerability The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution. The vulnerability in question is CVE-2025-24893 (CVSS… Read More "RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet"
The U.S. Department of Justice (DoJ) on Friday announced that five individuals have pleaded guilty to assisting North Korea’s illicit revenue generation schemes by enabling information technology (IT) worker fraud in violation of international sanctions. The five individuals are listed… Read More "Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies"
In practice, metrics and monitoring are very important in determining how well business activities are performed. This equally applies to information security. Metrics consist of quantifiable measures that indicate how an activity is being performed, while monitoring is the ongoing… Read More "The Importance of Metrics and Monitoring in Information Security"
Data classification is among the most basic organizational practices that ensure sensitive information is safely guarded and its regulation and compliance are easier to implement. Proper data classification allows organizations to handle data according to sensitivity, thus reducing risks related… Read More "Classifying Data in Cybersecurity"
Organizations are confronted with different difficulties in protecting sensitive information and regulating the same so as to ensure that appropriate controls are in place. Here, within this article, we will take an in-depth look into the aspects of Information Security… Read More "Guide to Information Security Governance and Access Control"
