Blog
New ‘Loop DoS’ Attack May Impact up to 300,000 Online Systems
Devised by researchers at the CISPA Helmholtz-Center for Information Security, the attack uses the User Datagram Protocol (UDP) and impacts an estimated 300,000 host and their networks.
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data. "It works by scanning and taking out important information from .env files, revealing login details linked to AWS and...
Ivanti Urges Customers to Fix Critical RCE Flaw in Standalone Sentry
This vulnerability affects all supported versions 9.17.0, 9.18.0, and 9.19.0. Older versions are also impacted. The company urge customers to install the available versions 9.17.1, 9.18.1, and 9.19.1, which address the issue.
Spa Grand Prix Email Account Hacked to Phish Banking Information From Fans
In a press release sent to BleepingComputer, the race organizer explained that the email account was hijacked on Sunday, March 17, 2024, and was followed by the threat actor sending fraudulent emails to an undisclosed number of people.
GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws
GitHub on Wednesday announced that it's making available a feature called code scanning autofix in public beta for all Advanced Security customers to provide targeted recommendations in an effort to avoid introducing new security issues. "Powered by GitHub...
How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl
In today's digital-first business environment dominated by SaaS applications, organizations increasingly depend on third-party vendors for essential cloud services and software solutions. As more vendors and services are added to the mix, the complexity and potential...
Serial Data Thief Pleads Guilty to Cybercrime Charges
Robert Purbeck, adopting the aliases "Lifelock" and "Studmaster" during his time as a cybercriminal, according to the Department of Justice (DoJ), stole personal data belonging to more than 132,000 people.
Ukrainian Police Arrest Suspected Brute Force Account Hijackers
Operating as part of a cybercrime group, they are said to have used brute-force techniques to hijack victims’ email and Instagram accounts that were protected by easy-to-guess passwords.
Making Sense of Operational Technology Attacks: The Past, Present, and Future
When you read reports about cyber-attacks affecting operational technology (OT), it’s easy to get caught up in the hype and assume every single one is sophisticated. But are OT environments all over the world really besieged by a constant barrage of complex...
Androxgh0st Exploits SMTP Services to Extract Critical Data
AndroxGh0st is a malware that specifically targets Laravel applications. The malware scans and extracts login credentials linked to AWS and Twilio from environment files.
FREE GUIDE