KrofekSecurity

The U.K. National Crime Agency (NCA) has taken significant action to combat Russian money laundering networks. These networks are known to support serious and organized crime across various regions, including…

Turla's Infiltration of Storm-0156: A New Threat Landscape The Russia-linked advanced persistent threat (APT) group known as Turla has recently made headlines due to its involvement in a previously undocumented…

Transitioning to Cloud: Understanding Risks and Benefits Are you using the cloud or thinking about making the switch? Multi-cloud and hybrid environments present many advantages for organizations. However, while the…

Europol recently announced a significant operation targeting an invite-only encrypted messaging service known as MATRIX. This platform was developed by criminals for criminal activities. The joint initiative, dubbed Operation Passionflower,…

Cybersecurity Alert: Malicious Software Supply Chain Attack on @solana/web3.js Cybersecurity researchers have raised concerns over a software supply chain attack targeting the popular @solana/web3.js npm library. This attack involved pushing…

The Struggles of Password Policies in Organizations Many organizations grapple with password policies that look strong on paper but fall flat in practice. These policies can be too rigid, too…

Cyber Espionage Campaign Targeting Telecommunications Providers A recent advisory from Australia, Canada, New Zealand, and the U.S. highlights a significant cyber espionage campaign by People's Republic of China (PRC)-affiliated threat…

Cybersecurity researchers have raised alarms about a new phishing campaign that exploits corrupted Microsoft Office documents and ZIP archives to bypass email defenses. This ongoing attack successfully evades antivirus software,…

Veeam Security Updates Address Critical Vulnerability Veeam has released essential security updates to address a critical flaw in the Service Provider Console (VSPC). This vulnerability, tracked as CVE-2024-42448, poses a…