Russian Group Targets Western Logistics and Technology Sectors
CISA warns of ongoing cyber espionage by Russian GRU unit APT28 targeting Western logistics and tech firms. Tactics include spearphishing,…
EU Launches European Vulnerability Database (EUVD) to Enhance Cybersecurity Transparency and Resilience
ENISA launches the European Vulnerability Database (EUVD) to boost cybersecurity transparency and resilience, providing centralized, reliable vulnerability info for the…
Blob URI Phishing Attacks: The Next Evolution of Stealthy Credential Theft
Phishing attacks continue evolving, with Blob URI phishing emerging as a sophisticated, stealthy method that bypasses traditional security checks. By…
Microsoft: the Future is Passkey Authentication for Consumer Accounts
Microsoft now allows password-less login for consumer accounts using passkeys, enabling secure access via biometrics, FIDO2 keys, or PINs. This…
Cyber Risk Evaluator (CRE): The Next Standard in Cyber Resilience and Professional Certification
In an era where digital threats grow more advanced by the day, traditional cybersecurity strategies are no longer enough. The…
CVE Program Funding Reinstated: Implications for Global Cybersecurity and the Road Ahead
The CVE Program’s funding has been reinstated, ensuring continued global vulnerability tracking. A new CVE Foundation now aims to secure…
Critical Vulnerability in FortiSwitch GUI – CVE-2024-48887
Critical FortiSwitch vulnerability (CVE-2024-48887) allows unauthenticated password changes – patch now or apply mitigation steps immediately
Massive Oracle Cloud Breach Hits Over 140,000 Tenants
A massive breach hit Oracle Cloud, exposing 6M records and affecting 140K+ tenants. Exploiting a known vulnerability, the attacker demands…
How Hackers Use HTML Files to Deliver Phishing Attacks
Hackers are increasingly using HTML attachments in phishing emails to bypass security filters and steal user credentials. This article explores…
Bybit Hack: $1.5B Crypto Heist Linked to North Korean Lazarus Group
The $1.5B Bybit hack has been traced to North Korean Lazarus Group via a supply chain attack on Safe{Wallet}. The…