Security News
![CloudFoxable: Open-source AWS penetration testing playground](/static/build/img/news/cloudfoxable-open-source-aws-penetration-testing-playground-small.jpg)
CloudFoxable is a capture-the-flag style learning platform you can deploy to your playground AWS account. It primarily targets current penetration testers seeking to learn exploitation of cloud-native attack paths, and cloud security experts aiming to practice offensive security techniques safely.
![Global cyber inequity skyrockets](/static/build/img/news/global-cyber-inequity-skyrockets-small.jpg)
There has been a sharp increase in cyber inequity globally, with 90% of executives warning that urgent action is needed to address it, according to the World Economic Forum. While increased geopolitical tensions and economic instability continue to concern industry experts, the report spotlights widening cyber inequity and emerging technologies, such as artificial intelligence, as key rising risks for the year ahead in the fast-growing cybersecurity sector.
![Bad bot traffic skyrockets across the web](/static/build/img/news/bad-bot-traffic-skyrockets-across-the-web-small.jpg)
Bad bots are automated programs designed with malicious intent to perform various activities on the internet, often causing harm to individuals, organizations, and online ecosystems. By masquerading as authentic users, bad bots empower bot operators, attackers, unscrupulous competitors, and fraudsters to execute a diverse range of malicious activities.
![Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks](/static/build/img/news/apache-activemq-flaw-exploited-in-new-godzilla-web-shell-attacks-small.jpg)
Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised...
![BreachForums admin 'Pompourin' sentenced to 20 years of supervised release](/static/build/img/news/breachforums-admin-pompourin-sentenced-to-20-years-of-supervised-release-small.jpg)
The series of nine vulnerabilities are found in EDK II - an open source implementation of UEFI maintained by TianoCore, according to researchers from Quarkslab that discovered the issue. According to the researchers, the vulnerabilities are specifically found in the NetworkPkg module included in EDK II, which is used by vendors including Arm, Insyde Software, American Megatrends, Phoenix Technologies and Microsoft.
![Tietoevry ransomware attack causes outages for Swedish firms, cities](/static/build/img/news/tietoevry-ransomware-attack-causes-outages-for-swedish-firms-cities-small.jpg)
Finnish IT services and enterprise cloud hosting provider Tietoevry has suffered a ransomware attack impacting cloud hosting customers in one of its data centers in Sweden, with the attack reportedly conducted by the Akira ransomware gang. Tietoevry confirmed today that the ransomware attack occurred Friday night into Saturday morning and has impacted only one of their data centers in Sweden.
![Watch out for "I can't believe he is gone" Facebook phishing posts](/static/build/img/news/alt/Phishing-small.jpg)
A widespread Facebook phishing campaign stating, "I can't believe he is gone. I'm gonna miss him so much," leads unsuspecting users to a website that steals your Facebook credentials. The phishing campaign started around a year ago, with Facebook having trouble blocking the posts as they continue to this day.
![Brave to end 'Strict' fingerprinting protection as it breaks websites](/static/build/img/news/brave-to-end-strict-fingerprinting-protection-as-it-breaks-websites-small.jpg)
Brave Software has announced plans to deprecate the 'Strict' fingerprinting protection mode in its privacy-focused Brave Browser because it causes many sites to function incorrectly. Fingerprinting protection in Brave Browser is a feature designed to enhance user privacy by preventing websites from tracking users through a technique called fingerprinting.
![Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed](/static/build/img/news/week-in-review-10-cybersecurity-frameworks-you-need-to-know-exploited-chrome-zero-day-fixed-small.jpg)
Google fixes actively exploited Chrome zero-dayIn the new stable release of the Chrome browser, Google has fixed three security vulnerabilities affecting the V8 engine, including one zero-day with an existing exploit. With a constantly evolving threat landscape, cybersecurity awareness training is an essential component in creating a good security culture.
![Court charges dev with hacking after cybersecurity issue disclosure](/static/build/img/news/court-charges-dev-with-hacking-after-cybersecurity-issue-disclosure-small.jpg)
A German court has charged a programmer investigating an IT problem with hacking and fined them €3,000 for what it deemed was unauthorized access to external computer systems and spying on data. The programmer examined the software and found that it established a MySQL connection with a remote server belonging to Modern Solution GmbH, the management software vendor.