When CVE Met CVE: RomCom Hackers Exploit Firefox and Windows Zero-Days
The Russian cybercrime group RomCom has been linked to a series of cyberattacks launched across the world. The notorious hackers…
Security
VMware Patches Multiple Vulnerabilities That Can Potentially Lead To Privilege Escalation and XSS Attacks
VMware has released security updates to address five vulnerabilities in its Aria Operations (version 8.x) and Cloud Foundation (versions 4.x…
Story of a Cyberattack – OPM breach
In 2015, the world was stunned by one of the largest and most devastating data breaches in history. The scale…
Personal and Company Internet Fraud
The internet may have brought about some incredible benefits for society, but with it we are also seeing an uptick…
The Hidden Risks of Third-Party Resources and How to Avoid Them
Businesses today increasingly depend on a wide variety of third-party resources to meet their cloud computing requirements, which range from…
How Is API Abuse Different from Web Application Attacks by Bots?
API abuse and web application bot attacks are often confused. This is understandable, as both involve automated interactions and are…
NSO Group Spies on People on Behalf of Governments
The Israeli company NSO Group sells Pegasus spyware to countries around the world (including countries like Saudi Arabia, UAE, India,…
Mastering IT Patch Management: Your Shield Against Cyber Threats
IT Patch Management isn’t the most glamorous topic in the tech world, but it’s a silent hero shielding system from…
15 Cloud Security Challenges Every InfoSec Professional Should Know About
Cloud adoption can feel like navigating uncharted territory — brimming with potential but fraught with hidden dangers. Cloud security challenges…
What Graykey Can and Can’t Unlock
This is from 404 Media: The Graykey, a phone unlocking and forensics tool that is used by law enforcement around…