A week after VMware released patches to remediate eight security vulnerabilities in VMware Workspace ONE Access, threat actors have begun to actively exploit one of …
Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams
Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do …
Microsoft Exposes Evasive Chinese Tarrask Malware Attacking Windows Computers
The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that’s used to maintain persistence on compromised Windows environments. The …
Russian Hackers Tried Attacking Ukraine’s Power Grid with Industroyer2 Malware
The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed[1] that it thwarted a cyberattack by Sandworm[2], a hacking group affiliated with Russia’s military …
FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin
An international law enforcement operation raided and took down RaidForums, one of the world’s largest hacking forums notorious for selling access to hacked personal information …
Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities
Microsoft’s Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities[1] spanning across its software product portfolio, including Windows, …
Cross-Regional Disaster Recovery with Elasticsearch
Unsurprisingly, here at Rewind[1], we’ve got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch …
Critical LFI Vulnerability Reported in Hashnode Blogging Platform
Researchers have disclosed a previously undocumented local file inclusion (LFI[1]) vulnerability in Hashnode[2], a developer-oriented blogging platform, that could be abused to access sensitive data …
E.U. Officials Reportedly Targeted with Israeli Pegasus Spyware
Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report[1] from Reuters. At least …
Finding Attack Paths in Cloud Environments
The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations’ most sensitive business applications, workloads, and data are …
