Is Once-Yearly Pen Testing Enough for Your Organization?
Any organization that handles sensitive data must be diligent in its security efforts, which include regular pen testing. Even a small data breach...
U.S. Sues Google for Dominance Over Advertising Technologies
Recently, the US Justice Department along with the eight states filed a lawsuit against Google, accusing the company of having a monopoly on the...
PY#RATION: New Python-based RAT Uses WebSocket for C2 and Data Exfiltration
Jan 26, 2023Ravie LakshmananThreat Detection / Endpoint Security
Cybersecurity researchers have unearthed a new Python-based attack campaign that leverages a Python-based remote access trojan...
U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software
Jan 26, 2023Ravie LakshmananCyber Threat / Phishing
At least two federal agencies in the U.S. fell victim to a "widespread cyber campaign" that involved...
North Korean Hackers Turn to Credential Harvesting in Latest Wave of Cyberattacks
Jan 25, 2023Ravie LakshmananCryptocurrency / Malware
A North Korean nation-state group notorious for crypto heists has been attributed to a new wave of malicious...
Top FinTech API Security Challenges
A recent report reveals that the number of attacks on financial service APIs and web applications worldwide increased by 257%.
There are more APIs in use than...
Over 4,500 WordPress Sites Hacked to Redirect Visitors to Sketchy Ad Pages
Jan 25, 2023Ravie LakshmananWebsite Security / WordPress
A massive campaign has infected over 4,500 WordPress websites as part of a long-running operation that's been...
The Definitive Browser Security Checklist
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how...
VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities
Jan 25, 2023Ravie LakshmananSoftware Security / VMware
VMware on Tuesday released software to remediate four security vulnerabilities affecting vRealize Log Insight (aka Aria Operations...
Wireshark 4.0.3 Released – What’s New!
The Wireshark Team has recently unveiled the latest iteration of their widely-utilized packet analyzer, Wireshark 4.0.3.
This version boasts a multitude of improvements, including new...