Cybersecurity researchers have disclosed details of a new vulnerability in a system used across oil and gas organizations that could be exploited by an attacker …
Re-Focusing Cyber Insurance with Security Validation
The rise in the costs of data breaches, ransomware, and other cyber attacks leads to rising cyber insurance premiums and more limited cyber insurance coverage. …
New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models
PC maker Lenovo has addressed yet another set of three shortcomings in the Unified Extensible Firmware Interface (UEFI) firmware affecting several Yoga, IdeaPad, and ThinkBook …
APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network
The Russia-linked APT29 nation-state actor has been found leveraging a “lesser-known” Windows feature called Credential Roaming as part of its attack against an unnamed European …
Several Cyber Attacks Observed Leveraging IPFS Decentralized Network
A number of phishing campaigns are leveraging the decentralized Interplanetary Filesystem (IPFS) network to host malware, phishing kit infrastructure, and facilitate other attacks. “Multiple malware …
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network
The Keksec threat actor has been linked to a previously undocumented malware strain, which has been observed in the wild masquerading as an extension for …
Top 5 API Security Myths That Are Crushing Your Business
There are several myths and misconceptions about API security. These myths about securing APIs are crushing your business. Why so? Because these myths are widening …
New IceXLoader Malware Loader Variant Infected Thousands of Victims Worldwide
An updated version of a malware loader codenamed IceXLoader is suspected of having compromised thousands of personal and enterprise Windows machines across the world. IceXLoader …
VMware Warns of 3 New Critical Flaws Affecting Workspace ONE Assist Software
VMware has patched five security flaws affecting its Workspace ONE Assist[1] solution, some of which could be exploited to bypass authentication and obtain elevated permissions. …
Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days
Microsoft’s latest round of monthly security updates has been released with fixes for 68 vulnerabilities[1] spanning its software portfolio, including patches for six actively exploited …
