The notorious Black Basta ransomware group has escalated its attack strategy, now leveraging Microsoft Teams as a potent tool for social engineering. This alarming development, observed throughout October 2024, has
Monthly Archives: November 2024
How Learning to Fly Made Me a Better Cybersecurity CEO
The lessons I’ve learned soaring through the skies have extended far beyond the runway.
VMware Aria Operations Vulnerabilities Allow Privilege Escalation & XSS Attacks
VMware, a leading cloud computing and virtualization software provider, has disclosed multiple critical vulnerabilities in its Aria Operations product. The most severe flaws could allow attackers to escalate privileges to
8 Tips for Hiring and Training Neurodivergent Talent
Neurodivergent talent can add so much to a cybersecurity team. How can companies ensure they have the right hiring and onboarding practices in place to ensure their success?
‘RomCom’ APT Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor
The innocuously named Russian-sponsored cyber threat actor has combined critical and serious vulnerabilities in Windows and Firefox products in a zero-click code execution exploit.
Geico, Travelers Fined $11.3M for Lax Data Security
New York state regulators punish insurers after cybercriminals illegally access customer info they then used to file scam unemployment claims during the COVID-19 pandemic.
Interpol Arrested 1,000+ Cybercriminals and Dismantled 130,000+ Malicious Networks
A joint operation by INTERPOL and AFRIPOL has led to the arrest of 1,006 suspects and the dismantling of 134,089 malicious infrastructures across 19 African countries. The operation, codenamed Operation
Windows Zero-days & Firefox Vulnerability Exploited by RomCom Hackers Group
Russian-aligned hacking group RomCom has been discovered exploiting two critical zero-day vulnerabilities affecting Mozilla Firefox and Windows systems in a sophisticated cyber-espionage campaign. The vulnerabilities allowed attackers to execute malicious
Hackers Abuse Avast Anti-Rootkit driver To Evade Detection
A malicious campaign has been discovered in which the malware employs a more nefarious tactic, dropping the legitimate Avast Anti-Rootkit driver (aswArPot.sys) to evade detection. The malware takes advantage of
What is Denial of Service(DoS) Attack?
The rapid growth of the internet and connected systems has revolutionized the way we communicate, work, and live. However, this increased connectivity has also exposed vulnerabilities that malicious actors can
