All Articles
Security Intelligence
3410 articles · Updated every 8 hours
Advertisement
BadeSaba Calendar App Compromised in State-Linked Propaganda Campaign
An analysis of the BadeSaba Calendar hack, where five million Iranian users received propaganda notifications during kinetic strikes, highlighting PsyOps risks.
Reclaim Security Secures $20M to Automate Vulnerability Remediation
Reclaim Security raises $20 million to solve the remediation gap, focusing on automating fixes and reducing mean time to remediate for enterprise SOC teams.
Cisco Catalyst SD-WAN Manager Exploitation: Patch CVE-2024-20437 Now
Cisco confirms active exploitation of two high-severity flaws in Catalyst SD-WAN Manager, involving hardcoded credentials and authentication bypass.
Phobos Ransomware Admin Evgenii Ptitsyn Pleads Guilty to Fraud
Russian national Evgenii Ptitsyn pleaded guilty for his role in administering the Phobos ransomware-as-a-service operation that extorted $16 million.
Cisco Catalyst SD-WAN Manager CVE-2023-20252 — Mitigation Guide
Cisco warns of active exploitation targeting Catalyst SD-WAN Manager vulnerabilities CVE-2023-20252 and CVE-2023-20253. Immediate patching is required.
Credential Abuse Risks: Solving Microsoft Entra ID MFA Coverage Gaps
Examine how coverage gaps in Microsoft Entra ID and Okta MFA implementations allow attackers to exploit valid credentials within Windows network environments.
Advertisement
Dust Specter Targets Iraqi Officials with SPLITDROP and GHOSTFORM
An Iran-nexus actor, Dust Specter, targets the Iraqi Ministry of Foreign Affairs using two new malware strains, SPLITDROP and GHOSTFORM, for espionage.
FBI and Europol Dismantle LeakBase Cybercrime Forum — Operation Update
International law enforcement agencies seize LeakBase forum, a major marketplace for stolen credentials and cybercrime tools with 142,000 members.
Tycoon 2FA PhaaS Infrastructure Dismantled in Europol-Led Operation
Europol and global law enforcement dismantle Tycoon 2FA, a Phishing-as-a-Service kit used in 64,000 attacks to bypass MFA via AitM techniques.
Targeted vs. Opportunistic: Differentiating Cyber Intrusions
Learn to distinguish targeted cyber intrusions from automated opportunistic scanning.
Russian Coruna iOS Exploit Kit Targets Global Users — Analysis
Security researchers uncover the Coruna iOS exploit kit, a nation-state tool now used in broader campaigns to deliver spyware to mobile devices.
Iran-US/Israel Cyber Conflict: Geopolitical & Cyber Threat Analysis
Analysis of the ongoing US-Israeli strikes on Iran, covering cyber, physical, and geopolitical dimensions.
VMware Aria Operations Command Injection Exploitation: Cloud Risk
A critical command injection vulnerability in VMware Aria Operations is actively exploited, granting attackers broad access to cloud environments.
Mail2Shell Zero-Click RCE Threatens FreeScout Servers
A critical Mail2Shell zero-click vulnerability in FreeScout helpdesk allows unauthenticated remote code execution, granting full server control.
Bitwarden Passkey Login for Windows 11: Implementation Guide
Bitwarden introduces passkey login support for Windows 11, providing phishing-resistant authentication using FIDO2 standards for enhanced account security.
Cybersecurity 'Hive Mind': Collective Defense Against Emerging Threats
Explore how 'hive mind' principles can enhance enterprise cybersecurity defenses through collective intelligence, shared threat awareness, and unified response…
LexisNexis Data Breach Confirmed: 400,000 Records Leaked
LexisNexis confirms data breach following hackers' leak of 2GB of files, impacting 400,000 personal information records. Understand the implications.
Tycoon 2FA PhaaS Platform Dismantled in Global Law Enforcement Takedown
International law enforcement dismantled Tycoon 2FA, a Phishing-as-a-Service platform used to bypass MFA and target 500,000 organizations monthly.
Coruna iOS Exploit Kit: Spyware-Grade Threat Targets Crypto
The sophisticated Coruna iOS exploit kit, leveraging 23 undocumented vulnerabilities, is now deployed in targeted espionage and crypto theft attacks.
Cisco Secure FMC Root Access & DoS Flaws Patched: Update Now
Cisco addresses two maximum-severity vulnerabilities in Secure Firewall Management Center (FMC) allowing unauthenticated root access and denial of service.
Coruna iOS Exploit Kit Targets iOS 13-17.2.1 with 23 Exploits
Google's GTIG identified Coruna (CryptoWaters), a powerful iOS exploit kit leveraging 23 exploits across 5 chains to target iOS 13.0-17.2.1. Update immediately.
Hacktivist DDoS Surge: Keymous+ and DieNet Target Middle East
Post-conflict, hacktivist groups Keymous+ and DieNet launched 149 DDoS attacks against 110 organizations across 16 countries in the Middle East.
XWorm RAT Delivery: Analyzing Multi-Stage Infection Chains
New XWorm malware waves utilize multi-technology delivery involving LNK files and PowerShell. Learn how to detect and mitigate XWorm RAT infections.
AI Recommendation Poisoning: Manipulating Summarization Features
Discovery of hidden prompt injection in AI summarization buttons allows companies to bias AI memory and manipulate future user recommendations.