1589 matches found
Cyber Attack on Ukrainian National Information Agency
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary On 17th January 2023, the Ukrainian National Information Agency "Ukrinform" suffered a partial cyber attack. The Government Computer Emergency Response Team of Ukraine CERT-UA initiated an investigation...
Hive Pro Recognized as a Leading Provider of Fraud and Breach Prevention Solutions in 2022
...
Apple addresses macOS Dirty Cow, Achilles, and other flaws
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Apple addressed multiple vulnerabilities in macOS Monterey. These vulnerabilities affect different functionalities such as Bluetooth, BOM, DriverKit, File System, IOHIDFamily, Kernel, and...
A New GoLang Botnet named GoTrim BruteForcing multiple CMS
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new GoTrim botnet has been scanning and brute-forcing on the four Content Management Systems WordPress, DataLife Engine, Joomla!, and OpenCart websites. GoTrim botnet is written in Go Programming...
The Cloud Atlas Perpetual Threat aims to persuade entities in Russia
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Cloud Atlas is a cyberespionage gang. They have launched repeated, highly focused attacks on critical infrastructure spanning geographical zones and political disputes since their discovery in 2014. As...
Actors, Threats and Vulnerabilities 5 – 11 December 2022
...
A new strain of Punisher ransomware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new variant of the Punisher ransomware is spreading via phishing website that delivers ransomware disguised as a COVID tracking application. Punisher Encryptor is a .NET binary that runs on Windows...
A new RansomExx ransomware strain revised in Rust
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary RansomExx is a ransomware variant that operates on a ransomware-as-a-service RaaS model and has been active since it first appeared in 2018 as Defray777. The latest version, dubbed RansomExx2 by threat...
How Continuous Threat Exposure Management can Secure the Finance Sector
...
Vulnerabilities & Threats that Matter 14 – 20 November 2022
...
Summary of Vulnerabilities & Threats: October 2022
...
Budworm Attackers Return with New Espionage Strikes Against the United States
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The Budworm espionage group exploited Log4j vulnerabilities to jeopardize the Apache Tomcat service by integrating several custom and publicly available tools to exfiltrate sensitive information...
Vulnerability in the UnRaR leads to code execution in Zimbra
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Unrar has a path traversal vulnerability that allows an unauthenticated attacker to execute arbitrary commands as a Zimbra user and escalate privileges...
Vulnerabilities & Threats that Matter 20 June – 26 June 2022
Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 413 14 4 121 19 33 For a detailed threat digest, download the pdf file here Summary The last week of June 2022 witnessed the discovery of 413 vulnerabilities out of which ...
New Zoom vulnerabilities can compromise user devices with a single message
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Zoom has addressed four security flaws that, one of them if exploited, can compromise a user via chat by sending specially crafted Extensible Messaging and Presence Protocol XMPP messages and executing...
The US Cyber Incident Reporting Act – its impact and its requirements for Critical Infrastructure Entities
...
Monthly Threat Digest: March 2022
...
Unpromising Vulnerability Prioritization with Common Vulnerability Scoring System (CVSS)
...
Millions of WordPress site backups at risk due to a vulnerability in UpdraftPlus plugin
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here UpdraftPlus is a backup tool for WordPress files, databases, plug-ins, and themes that allows you to create, restore, and migrate backups. UpdraftPlus is utilized by more than three million WordPress websites, according to i...
Why VM Programs Suck
& From the Trenches This is the conversation I have with VM leads every week. It usually starts at minute thirty of a discovery call, after the official agenda is over and the Zoom faces relax. Someone says "can I be honest with you for a second?" — and then I get the list. Same complaints...
CTEM for Financial Services: Protect What Matters Most
Financial institutions process trillions of dollars in transactions every day. One exploited vulnerability can freeze operations, trigger regulatory penalties, and erode customer trust overnight. Traditional vulnerability management, which scans, scores, and queues patches, cannot keep pace with...
API Security Testing and Vulnerability Assessment
APIs now carry more sensitive data than traditional web interfaces. Payment details, health records, authentication tokens, and customer databases all flow through API endpoints that attackers can probe without ever touching a browser. A single misconfigured endpoint can expose millions of record...
Threat Intelligence for Exposure Management: How TI Powers Smarter CTEM Programs
Your security team has access to more vulnerability data than ever before. Scanners produce thousands of findings each week. Threat feeds deliver a steady stream of indicators. Yet most organizations still struggle with the same fundamental problem: deciding what to fix first. The disconnect...
What Is CAASM? Cyber Asset Attack Surface Management Explained
Your security team runs scans from five different tools. Each one gives you a different number of assets, a different count of vulnerabilities, and a different view of your risk. Meanwhile, your CMDB is outdated, shadow IT keeps expanding, and nobody can confidently answer a basic question: "What...
The Best Vulnerability Scanning Tools for 2026: A Complete Guide
Your vulnerability scanner found 14,000 issues last quarter. Your team patched 800. The other 13,200 are sitting in a spreadsheet that nobody opens anymore. This is the reality for most security teams. The scanner works. It finds vulnerabilities. But without context, prioritization, or a clear pa...
Tenable vs. Hive Pro: Key Differences Explained
If your security team is drowning in a sea of vulnerability alerts and struggling to make sense of multiple risk scores, you know that more data doesn't always mean more clarity. “The right threat exposure management platform should cut through the noise, not add to it.” When evaluating your...
Threat Exposure Management vs. Legacy Scanners: A Clear Winner
Attackers don’t think in terms of CVSS scores. They think in terms of attack paths. They look for the weakest link—a misconfiguration here, an unpatched server there—that they can chain together to reach your most valuable assets. Traditional vulnerability scanners are completely blind to this...
Proactive Malware Threat Management: A How-To Guide
Trying to defend against every potential malware attack is like trying to boil the ocean. You can’t be everywhere at once, and treating every vulnerability as a top priority is a surefire way to burn out your team. The old way of reacting to every alert simply doesn't scale. A modern defense...
Rating The Best Vulnerability Management Tools for Security Pros
A home security system doesn't just tell you that a window is unlocked; it tells you which window, whether someone is actively trying to open it, and in which room your most valuable possessions are stored. It gives you the context to act decisively. Similarly, a modern vulnerability management...
5 Exposure Management Best Practices for Your Team
Let's be honest: the traditional approach to vulnerability management is broken. Your team is likely drowning in a sea of alerts, staring at scan reports thousands of lines long, and struggling to figure out what to fix first. This constant state of reactive fire-fighting is exhausting and, worse...
9 Key Areas to Monitor for Potential Security Threats
The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...
5 Best Threat Exposure Management Tools for 2025
A long list of vulnerabilities without context isn't a security strategy—it's just noise. Legacy vulnerability scanners are great at finding potential flaws, but they often fail to answer the most important question: "What should we fix right now?" This is why Threat Exposure Management TEM...
Attack Surface Exposures: A Practical Guide
Many security teams believe their existing tools have them fully covered. With a firewall, endpoint protection, and a vulnerability scanner, it’s easy to assume you can see everything that matters. This is one of the most dangerous myths in cybersecurity today. These tools often operate in silos,...
The Shift from Vulnerability Management to Exposure Management
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Your vulnerability management program is optimized for the wrong war. You're counting patches whil...
The Exposure Validation Revolution: From Hoping to Knowing
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on the Exposure Validation Revolution! Imagine your security team...
Free Trials of Sticky Notes Installer Trojanized
...
China-linked Hackers Exploit Cisco NX-OS as Zero-Day
...
DragonForce Unleashes Chaos with Leaked Lockbit Builder
...
CISA Known Exploited Vulnerability Catalog May 2024
Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog, prioritize remediation of listed vulnerabilities, and reduce...
Centralizing Your Threat Exposure Visibility In One Place
Modern cybersecurity functions staffed with only a handful of analysts and engineers rely on more than 10+ tools to manage their IT infrastructure and security. Most of these tools, mainly scanners, produce large amounts of data such as logs, alerts, and reports, each contributing to the...
Summary of Vulnerabilities, Actors & Attacks: December 2023
...
New Linux Krasue RAT Targeting Telecom Companies in Thailand
Summary: Krasue, a new Linux Remote Access Trojan, targets Thai organizations, primarily in telecommunications, using embedded rootkits and a unique RTSP-based communication tactic. Believed to be connected to XorDdos, it evades detection through various stealth measures, emphasizing the importan...
Attackers Exploit Brazil’s PIX System with GoPIX Malware Campaign
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The popularity of Brazils PIX payment system has attracted cybercriminals using GoPIX malware, targeting users searching for "WhatsApp web" with malicious ads. This poses a threat to users financial and...
A Deep Dive into Space Pirates’ Unconventional Cyber Arsenal
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Space Pirates have been a persistent digital threat since 2017, relentlessly targeting over 16 organizations in Russia and one in Serbia. Despite retaining its core methods, this infamous group continuous...
CISA Known Exploited Vulnerability Catalog June 2023
For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included in the catalog, a vulnerability must meet three criteria: hav...
Critical Vulnerabilities in VMware Aria Operations Addressed and Secured
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary These three vulnerabilities in VMware Aria Operations could allow attackers to remotely execute code, access sensitive information, and potentially disrupt network operations, posing significant...
Buhti Ransomware Operation Repurposes Leaked Encryptors
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Buhti ransomware, linked to Blacktail threat actors, employs leaked code of LockBit and Babuk variants. By exploiting vulnerabilities like PaperCut NG, they exfiltrate data and distribute ransomware. The...
Unveiling the Minas Miner’s Deceptive Tactics
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Minas is a multi-stage cryptocurrency miner with a concealed presence. It evades detection through encryption, randomization, and persistence techniques, showcasing determined network compromise. To...
Ice Breaker a Looming Threat on the Gaming Industry
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Online gaming and gambling companies have been targeted by hackers using unseen backdoors. The attacks are grouped together and referred to as "Ice Breaker." The intrusions make use of smart social...
The Linux kernel has several security flaws
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The Linux kernel is vulnerable to a vulnerability that allows remote attackers to execute arbitrary code on affected installations. This vulnerability can be exploited without authentication, but...