Category Archives: Phishing

State-sponsored APTs are leveraging WinRAR bug

Posted on by

A number of government-backed APTs are exploiting CVE-2023-38831, a file extension spoofing vulnerability in WinRAR, a widely used file archiver utility for Windows. CVE-2023-38831 has been patched in August 2023, along with another high-severity RCE v… Continue reading State-sponsored APTs are leveraging WinRAR bug→

New Netskope Report Exposes Increasing Use of Cloud Apps to Spread Malware

Posted on by

Microsoft OneDrive accounts for 26% of the overall usage of cloud storage apps to host malware, ahead of Microsoft PowerPoint and GitHub. Continue reading New Netskope Report Exposes Increasing Use of Cloud Apps to Spread Malware→

New CISA and NSA Identity and Access Management Guidance Puts Vendors on Notice

Posted on by

This CISA-NSA guidance reveals concerning gaps and deficits in the multifactor authentication and Single Sign-On industry and calls for vendors to make investments and take additional steps. Continue reading New CISA and NSA Identity and Access Management Guidance Puts Vendors on Notice→

Colonial Pipeline was hacked. No, wait, Accenture was hacked. No, wait….. untangling claims.

Posted on by

By, now, there’s been a lot of buzz by some claims made by RansomedVC on their leak site and on their Telegram channel. In their post this afternoon, RansomedVC claimed that (1) Rob Lee of Dragos somehow cheated someone called “fooble,&#822… Continue reading Colonial Pipeline was hacked. No, wait, Accenture was hacked. No, wait….. untangling claims.→