Collaborate Disseminate
You can tell the story of the current state of stolen credential-based attacks in three numbers:
Stolen credentials were the #1 attacker action in 2023/24, and the breach vector for 80% of web app attacks. (Source: Verizon).
Cybersecurity budgets grew… Continue reading The $10 Cyber Threat Responsible for the Biggest Breaches of 2024
Contrast Security released Application Vulnerability Monitoring (AVM), a new capability of Application Detection and Response (ADR). AVM works within applications to find application and API vulnerabilities in production and correlate those vulnerabili… Continue reading Contrast Security AVM identifies application and API vulnerabilities in production
Details have emerged about a now-patched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface (UEFI) systems.
The vulnerability, assigned the CVE identifier CVE-2024-7344 (CVSS score: 6…. Continue reading New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits
Technology is changing the global economy, and fintech companies are at the backbone of this transformation. To keep… Continue reading 6 Strategic Innovations Transforming the Fintech Industry
Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that’s designed to disable NT LAN Manager (NTLM) v1 can be trivially bypassed by a misconfiguration.
“A simple misconfiguration in on-premise applications can overrid… Continue reading Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions
Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns.
“In both campaigns, attackers hid malicious code in images they uploaded to archive[.]o… Continue reading Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer
A threat actor has leaked configuration files (aka configs) for over 15,000 Fortinet Fortigate firewalls and associated admin and user credentials. The collection has been leaked on Monday and publicized on an underground forum by the threat actor that… Continue reading Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them?
ESET researchers have identified a vulnerability (CVE-2024-7344) impacting most UEFI-based systems, which allows attackers to bypass UEFI Secure Boot. The issue was found in a UEFI application signed with Microsoft’s “Microsoft Corporation UEFI CA 2011… Continue reading New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344)
Bitwarden is one of the best password managers on the market, but are you using it effectively? Here are a few tips to ensure you are. Continue reading 7 ways to get more out of your Bitwarden password manager
A pastor in Pasco, Washington, has been indicted on 26 counts of fraud for orchestrating a cryptocurrency scam that defrauded over 1,500 investors of nearly $5.9 million between 2021 and 2023. Many of the investors were members of his congregation. Ble… Continue reading Pastor Who Saw Crypto Project In His ‘Dream’ Indicted For Fraud