Jan 19, 2023Ravie LakshmananEmail Security / Security Breach Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors …
Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa
Jan 18, 2023Ravie LakshmananCyber Threat / Malware An ongoing campaign dubbed Earth Bogle is leveraging geopolitical-themed lures to deliver the NjRAT remote access trojan to …
Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks
Jan 18, 2023Ravie LakshmananCyber Espionage / Cyber Risk The threat actor known as BackdoorDiplomacy has been linked to a new wave of attacks targeting Iranian …
Guide: How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost
Jan 18, 2023The Hacker NewsVirtual CISO / Automated vCISO Compliance services are emerging as one of the hottest areas of cybersecurity. While compliance used to …
Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers
Jan 18, 2023Ravie LakshmananNetwork Security Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be weaponized to achieve remote code …
Git Users Urged to Update Software to Prevent Remote Code Execution Attacks
Jan 18, 2023Ravie LakshmananDevOpsSec / Software Security The maintainers of the Git[1] source code version control system have released updates to remediate two critical vulnerabilities …
CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems
Jan 18, 2023Ravie LakshmananICS/SCADA Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published[1] four Industrial Control Systems (ICS) advisories, calling out several security …
Microsoft Azure Services Flaws Could’ve Exposed Cloud Resources to Unauthorized Access
Jan 17, 2023Ravie LakshmananCloud Security / Bug Report Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF[1]) attacks that could …
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware
Jan 17, 2023Ravie LakshmananThreat Response / Malware New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub …
4 Places to Supercharge Your SOC with Automation
It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with …
