
Blog Series
Month: January 2023

IceID malware infiltrates Active Directory...
In a notable IcedID malware attack, the assailant impacted the Active Directory domain of the victim in less than 24 hours, transiting from initial infection to lateral movement in fewer...
The Ultimate Guide to Linux...
System administrators that work in enterprise environments know that patching is practically a full-time job. Consider the effort involved in patching just one system: a sysadmin must determine that a...
Bitdefender releases decryptor for MegaCortex...
Bitdefender experts have created a universal decryptor for victims of the MegaCortex ransomware family. MegaCortex has been in use since at least January 2019, and some of the actors who...
TuxCare Unveils OEM Partner Program...
PALO ALTO, Calif. – January 19, 2023 – TuxCare, a global innovator in enterprise-grade cybersecurity for Linux, today announced the launch of its TuxCare OEM Partner Program that aims to...
Cybernews researchers use ChatGPT to...
The Cybernews research team observed that the AI-powered chatbot ChatGPT can provide step-by-step directions on how to hack websites. When the researchers asked the AI about certain vulnerabilities on a...
Modernizing Vulnerability Management at Higher...
Colleges and universities are heavily targeted by cybercriminals that seek to exploit vulnerabilities and trick staff members to infect systems with malware, spyware, and ransomware. In order to protect their...
Zoho patches high-severity SQL injection...
Zoho says it has patched several ManageEngine products for a newly disclosed high-severity SQL injection flaw. CVE-2022-47523 is a SQL injection (SQLi) vulnerability in ManageEngine Password Manager Pro, PAM360, and...
Think You Can’t Afford Consistent...
Look, everyone knows that it’s a tough act. Thousands of CVEs are added to the list every month – all in the context of a technology environment that grows relentlessly...
Qualcomm, Lenovo issues numerous patches...
Qualcomm and Lenovo have issued patches to address a number of security flaws in their chipsets, some of which could result in data leakage and memory corruption. Security flaws have...
Common Government Cybersecurity Standards –...
The public sector, including state and federal agencies, are at just as much risk of cyberattacks as the private sector. Yet, in terms of technology adoption, the public sector is...
Dridex malware targets Mac...
Dridex, a Windows-focused banking trojan that has since expanded its capabilities to include information theft and botnet capabilities, is now targeting Macs via email attachments that appear to be regular...
High severity flaw allow attackers...
According to ARMO researchers, The Kyverno admission controller for container images has a high-severity security vulnerability. Using a malicious image repository or MITM proxy, the bug (CVE-2022-47633) can be exploited...