Gelsemium: Cyber Attacks and the New Linux Backdoor WolfsBane Recent findings from cybersecurity firm ESET reveal that the China-aligned advanced persistent threat (APT) actor known as Gelsemium is utilizing a new Linux backdoor called WolfsBane. This backdoor is significant because it is part of ongoing cyber attacks targeting East and Southeast Asia. These attacks show…
Understanding the Compromise of Palo Alto Networks Devices Recent reports indicate that as many as 2,000 Palo Alto Networks devices have been compromised due to newly disclosed security flaws. This alarming discovery highlights the vulnerabilities affecting many organizations worldwide. Palo Alto Networks equipment is widely used for cybersecurity, and any breach can have serious implications…
Understanding Privileged Access Management (PAM) Privileged access management (PAM) plays a pivotal role in building a strong security strategy. By implementing PAM, organizations can significantly reduce cybersecurity risks and gain tighter control over privileged access. Additionally, PAM helps ensure regulatory compliance and lightens the load on IT teams. The Importance of PAM in Cybersecurity PAM…
Why Automated Security Validation (ASV) Matters As a relatively new security category, many security operators and executives I’ve met have asked us, “What are these Automated Security Validation (ASV) tools?” Instead of diving into the basics of what ASV is, let's explore the reasons behind its growing importance. In this article, we'll address common use…
Threat Actors from DPRK: The Growing Risks of Impersonation Threat actors with ties to the Democratic People's Republic of Korea (DPRK) are engaging in deceptive practices by impersonating U.S.-based software and technology consulting businesses. This strategy serves their financial objectives and forms part of a broader scheme targeting the information technology (IT) workforce. To better…
Threat Actors from DPRK: The Growing Risks of Impersonation Threat actors with ties to the Democratic People's Republic of Korea (DPRK) are engaging in deceptive practices by impersonating U.S.-based software and technology consulting businesses. This strategy serves their financial objectives and forms part of a broader scheme targeting the information technology (IT) workforce. To better…
Internet-Exposed Industrial Control Systems: A Growing Concern Recent research highlights a pressing issue in cybersecurity: more than 145,000 internet-exposed Industrial Control Systems (ICS) have been identified across 175 countries. This alarming finding is particularly significant for the United States, where over one-third of these exposures are located. Understanding the scope of this problem is essential…
Five alleged members of the notorious Scattered Spider cybercrime crew have been indicted in the U.S. for their role in a series of sophisticated attacks targeting companies nationwide. These attackers employed social engineering techniques to harvest credentials, leading to unauthorized access to sensitive data. Their efforts have reportedly resulted in the theft of digital assets…
Google has made significant strides in open-source security with its AI-powered fuzzing tool, OSS-Fuzz. This cutting-edge technology has successfully identified 26 vulnerabilities in various open-source code repositories, including a medium-severity flaw in the widely used OpenSSL cryptographic library. This achievement highlights the potential of automated vulnerability finding and showcases how AI can enhance software security….
The Growing Threat of NodeStealer: What You Need to Know Recently, threat hunters have issued warnings about an updated version of the Python-based NodeStealer malware. This latest variant is more dangerous than ever, as it is designed to extract sensitive information from victims’ Facebook Ads Manager accounts. Additionally, it has the capability to harvest credit…