Cybersecurity

Ways to Develop a Cybersecurity Training Program for EmployeesWays to Develop a Cybersecurity Training Program for Employees

Ways to Develop a Cybersecurity Training Program for Employees

Cybersecurity experts would have you believe that your organization’s employees have a crucial role in bolstering or damaging your company's…

3 years ago
Analysis of the SunnyDay ransomwareAnalysis of the SunnyDay ransomware

Analysis of the SunnyDay ransomware

The analysis of a recent sample SunnyDay ransomware revealed some similarities with other ransomware, such as Ever101, Medusa Locker, Curator,…

3 years ago
CISA adds Windows CLFS Driver Privilege Escalation flaw to its Known Exploited Vulnerabilities CatalogCISA adds Windows CLFS Driver Privilege Escalation flaw to its Known Exploited Vulnerabilities Catalog

CISA adds Windows CLFS Driver Privilege Escalation flaw to its Known Exploited Vulnerabilities Catalog

The U.S. CISA added the CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity…

3 years ago
China-linked Hafnium APT leverages Tarrask malware to gain persistenceChina-linked Hafnium APT leverages Tarrask malware to gain persistence

China-linked Hafnium APT leverages Tarrask malware to gain persistence

China-linked Hafnium APT group started using a new piece of new malware to gain persistence on compromised Windows systems. The…

3 years ago
EU officials were targeted with Israeli surveillance softwareEU officials were targeted with Israeli surveillance software

EU officials were targeted with Israeli surveillance software

According to a report published by Reuters, an Israeli surveillance software was used to spy on senior officials in the…

3 years ago
Microsoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilitiesMicrosoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilities

Microsoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilities

Microsoft Partch Tuesday security updates for April 2022 fixed 128 vulnerabilities, including an actively exploited zero-day reported by NSA. Microsoft…

3 years ago
CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities CatalogCISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog

CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog

The U.S. CISA added the CVE-2022-23176 flaw in WatchGuard Firebox and XTM appliances to its Known Exploited Vulnerabilities Catalog. The U.S.…

3 years ago
Anonymous hacked Russia’s Ministry of Culture and leaked 446 GBAnonymous hacked Russia’s Ministry of Culture and leaked 446 GB

Anonymous hacked Russia’s Ministry of Culture and leaked 446 GB

The Anonymous collective has hacked Russia's Ministry of Culture and leaked 446 GB of data through the DDoSecrets platform. Data…

3 years ago
Dependency Review GitHub Action prevents adding known flaws in the codeDependency Review GitHub Action prevents adding known flaws in the code

Dependency Review GitHub Action prevents adding known flaws in the code

Dependency Review GitHub Action scans users' pull requests for dependency changes and will raise an error if any new dependencies…

3 years ago
Securing Easy Appointments and earning CVE-2022-0482Securing Easy Appointments and earning CVE-2022-0482

Securing Easy Appointments and earning CVE-2022-0482

Easy Appointments contained a very dangerous Broken Access Control vulnerability tracked as CVE-2022-0482 that was exposing PII. Another day, another…

3 years ago