Cybersecurity Blog
60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ...
BunkerWeb: Open-Source Web Application Firewall (WAF)
The genesis of BunkerWeb came from the need to apply security practices manually every time a web application was put ...
ViperSoftX Info-Stealing Malware Being Distributed Through Fake Ebooks
Originally detected in 2020, the ViperSoftX malware now incorporates more sophisticated evasion tactics by using the ...
Risk Escalates as Communication Channels Proliferate
A survey by data security company Kiteworks reveals that around 60% of organizations struggle to track their information ...
Critical GitLab Bug Lets Attackers Run Pipelines as Other Users
The vulnerability impacts all GitLab CE/EE versions from 15.8 to 16.11.6, 17.0 to 17.0.4, and 17.1 to 17.1.2. Under ...
Russian Researchers Identify Alleged Ukrainian Developer of Malicious Remote Access Tool
Researchers have identified the developer of a malicious remote access tool used in attacks on Russian organizations. ...
Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk
The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an “advanced and ...
Microsoft Outlook Faced Critical Zero-Click RCE Vulnerability
Security researchers have found a critical vulnerability, CVE-2024-38021, impacting Microsoft Outlook. This zero-click ...