penetration testing
In an era defined by relentless cyber threats and increasingly sophisticated attack vectors, the traditional annual penetration test is facing scrutiny.
Cisco
Reports are emerging that malicious actors are actively exploiting a critical vulnerability in unpatched Cisco Smart Licensing Utility (CSLU) instances.
post-quantum cryptography
The United Kingdom's National Cyber Security Centre (NCSC) has issued a directive requiring critical national infrastructure and other key organizations to complete their transition to post-quantum cryptography (PQC) by 2035.
WordPress
A significant security flaw has been identified in the popular WordPress security plugin, WP Ghost, potentially exposing millions of websites to remote code execution (RCE) attacks.
Windows 11
Microsoft has quietly removed an upgrade block that previously prevented users of the popular racing game Asphalt 8: Airborne from upgrading their systems to the latest Windows 11 version
VSCode
The VSCode Marketplace, a central repository for extensions that enhance the popular code editor, has been compromised by two malicious extensions deploying in-development ransomware.
GitHub Actions
A recent supply chain attack targeting the popular GitHub Action, tj-actions/changed-files, has reportedly exposed secrets in a relatively small subset of the approximately 23,000 repositories utilizing the tool.
ransomware
Security researchers have uncovered a new backdoor, ominously named 'Betruger' (German for 'imposter' or 'deceiver'), which has been deployed in a series of recent ransomware attacks.
cybersecurity
Ascom, a Swiss global solutions provider specializing in healthcare and enterprise communication systems, has confirmed it suffered a cyberattack targeting its IT infrastructure.
CISA
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning to U.S. federal civilian executive branch (FCEB) agencies, demanding immediate action to mitigate a critical security vulnerability found within NAKIVO's Backup & Replication software
Darknet
A recent report has sounded alarms about the increasing availability of compromised identity data on the darknet, positioning it as a leading cybersecurity threat to businesses. This raises serious questions about the effectiveness of current data protection strategies and the ability of enterprises to safeguard sensitive information from increasingly sophisticated
Darknet
A self-employed tattoo artist, operating under the moniker 'Utopia,' found their entrepreneurial aspirations curtailed following a federal investigation into darknet marketplace activities.