Janeleiro a New Banking Trojan Targeting Corporate, Government Targets
A banking Trojan has been found out by cybersecurity researchers, which has targeted many organizations across the state of Brazil....
Security
Columbo – A Computer Forensic Analysis Tool Used To Simplify And Identify Specific Patterns In Compromised Datasets
Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down...
ThreatMapper – Identify Vulnerabilities In Running Containers, Images, Hosts And Repositories
The Deepfence Runtime Threat Mapper is a subset of the Deepfence cloud native workload protection platform, released as a community...
Security Isn’t a Four-Letter Word: How Infrastructure as Code (IaC) Amplifies DevOps Through the Inclusion of Security
Our fast-paced lives are fueled by innovative, cloud-native companies. We are able to watch our favorite programs and movies from...
A Quick Look Into Cloud Infrastructure Entitlement Management (CIEM)
The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business...
A Quick Look Into Cloud Workload Protection Platforms (CWPPs)
The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business...
MDR Vendor Must-Haves, Part 4: Ingestion of Authentication Data Across Local, Domain, and Cloud Sources
This blog post is part of an ongoing series about evaluating Managed Detection and Response (MDR) providers. For more insights,...
Pwn2Own 2021 Day 1 – participants earned more than $500k
The Pwn2Own 2021 hacking competition has begun and white hat hackers participants earned more than $500000 on the first day....
Crooks use Telegram bots and Google Forms to automate phishing
Crooks increasingly often use legitimate services such as Google Forms and Telegram to obtain user data stolen on phishing websites....
Gigaset Android smartphones infected with malware after supply chain attack
A new supply chain attack made the headlines, threat actors compromised at least one update server of smartphone maker Gigaset to...
European Commission and other institutions were hit by a major cyber-attack
Not only the European Commission, but many other organizations of the European Union have been targeted by a cyberattack in...
SAP systems are targeted within 72 hours after updates are released
On-premises SAP systems are targeted by threat actors within 72 hours after security patches are released, security SAP security firm...
Fake Trezor app steals more that $1 million worth of crypto coins
Several users of Trezor, a small hardware device that acts as a cryptocurrency wallet, have been duped by a fake...
Pre-installed auto installer threat found on Android mobile devices in Germany
Users primarily located in Germany are experiencing malware that downloads and installs on their Gigaset mobile devices—right out of the...
Aurora campaign: Attacking Azerbaijan using multiple RATs
This post was authored by Hossein Jazi As tensions between Azerbaijan and Armenia continue, we are still seeing a number...
Has Facebook leaked your phone number?
Unless you keep your social media at a pole’s distance, you have probably heard that an absolutely enormous dataset—containing over...
Research claims Google Pixel phones share 20 times more data than iPhones
If you’re an Android phone user, now might be a good time to invest in a good pair of ear...
Hackers Send Fake Census Form Alerts to UK Respondents
The United Kingdom, like every other country, runs a census every ten years. The census asks residents a number of...
FBI & CISA Warns of Active Attacks on Fortinet FortiOS Servers
The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) have released a Joint Cybersecurity Advisory (CSA)...
Facebook Data Breach: How To Check If Your Details Were Leaked
By now you must have heard that the social network giant ‘Facebook’ has witnessed a very large-scale user data breach...
The data of potential borrowers of Bank Dom.RF are being sold on the Internet
The data was obtained as a result of a leak. A representative of the bank explained its vulnerability in the...
The Less Progressive but Consistent, Cycldek Threat Actors
It is somewhat usual for tools and methodologies to be allowed to share throughout the nebula of Chinese threat actors....
Burpsuite-Copy-As-XMLHttpRequest – Copy As XMLHttpRequest BurpSuite Extension
The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies...
Scylla – The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc…
Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts,...
