î ‚Jul 30, 2025î „Ravie LakshmananEndpoint Security / Cyber Espionage Chinese companies associated with the state-sponsored hacking group Silk Typhoon, also known as Hafnium, have been revealed to be behind a series of technology patents, unveiling insights into the secretive cyber contracting …
Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools Read More »
Until recently, the cyber attacker methodology behind the biggest breaches of the last decade or so has been pretty consistent: Compromise an endpoint via software exploit, or social engineering a user to run malware on their device; Find ways to …
How the Browser Became the Main Cyber Battleground Read More »
î ‚Jul 28, 2025î „Ravie LakshmananCyber Attack / Ransomware The infamous cybercrime group known as Scattered Spider is focusing on VMware ESXi hypervisors in attacks aimed at retail, airline, and transportation sectors in North America. According to an in-depth analysis by Google’s …
î ‚Jul 25, 2025î „Ravie LakshmananCybercrime / Insider Threat The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned a North Korean front company and three associated individuals for their involvement in a fraudulent remote information technology (IT) …
1 Artificial intelligence (AI) is making waves in the tech industry and has now caught the attention of malicious actors looking to automate their attack tactics. According to a recent advisory from CERT Ukraine, a new AI-based malware known as …
New LAMEHUG AI Malware Devises Commands In Real-Time Read More »
î ‚Jul 25, 2025î „Ravie LakshmananMalware / Cloud Security Researchers have uncovered two separate malware campaigns that exploit vulnerabilities and misconfigurations in cloud environments to distribute cryptocurrency miners. The first campaign, named Soco404, and the second one, named Koske, have been identified …
The Kathmandu center of excellence provides SecurityPal with a cost-effective solution that allows for human involvement while remaining competitive in pricing. Find out more about how this center benefits SecurityPal by reading the full article.
î ‚Jul 23, 2025î „Ravie LakshmananSoftware Integrity / DevSecOps Google recently unveiled the launch of a groundbreaking initiative known as OSS Rebuild to enhance the security of open-source package ecosystems and mitigate software supply chain attacks. Matthew Suozzo from the Google Open …
114 Google has recently fixed a critical zero-day vulnerability in its Chrome browser that allowed for sandbox escape. The company has released the patch for Chrome on Desktop and Android devices along with several other bug fixes. It is important …
Google Patched Chrome Zero-Day That Allowed Sandbox Escape Read More »
î ‚Jul 21, 2025î „Ravie LakshmananThreat Intelligence / Authentication Cybersecurity researchers have uncovered a new attack method that allows threat actors to weaken Fast IDentity Online (FIDO) key protections by tricking users into approving authentication requests from fake company login portals. FIDO …
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse Read More »
