⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Many corporate boards fail to recognize technology risk until it materializes into a crisis, leading to reactive rather than proactive oversight. The article urges directors to treat cybersecurity and tech risk as core governance responsibilities that directly impact business resilience and shareholder value.
A hand-crafted Windows backdoor, only 12 KB in size, concealed its command-and-control domain as the number of trailing spaces in a fake desktop.ini file. The malware was found on exactly one machine, highlighting a highly targeted operation that relied on steganographic hiding to evade detection.
A maximum-severity remote code execution vulnerability in SAP Commerce Cloud, patched only three days ago, is already being actively exploited in attacks. Threat intelligence firm Defused has observed the flaw being targeted, highlighting the rapid weaponization of newly disclosed vulnerabilities.
French authorities are investigating a data breach at the Directorate General of Public Finances after a hacker claimed to have stolen data from 600,000 victims. The unauthorized access occurred in late June through identity theft or misuse.
This article details the post-exploitation phase of a simulated attack on a Kibana and Elasticsearch environment, demonstrating data exfiltration and persistence techniques. After gaining initial access through exposed ports and exploiting known vulnerabilities, the attackers show how they maintain access and steal data.
Mustang Panda (HoneyMyte) has been caught using an updated CoolClient backdoor paired with a signed Windows kernel rootkit, msagent.sys. The rootkit communicates with the user-mode component via IOCTL requests, hiding malicious artifacts at the kernel level.