Security News
![How to Analyze Malware’s Network Traffic in A Sandbox](/static/build/img/news/how-to-analyze-malwares-network-traffic-in-a-sandbox-small.jpg)
Malware analysis encompasses a broad range of activities, including examining the malware's network traffic. To be effective at it, it's crucial to understand the common challenges and how to...
![New cybercrime market 'OLVX' gains popularity among hackers](/static/build/img/news/new-cybercrime-market-olvx-gains-popularity-among-hackers-small.jpg)
A new cybercrime marketplace, OLVX, has emerged and is quickly gaining new customers looking to purchase tools to conduct online fraud and cyberattacks. OLVX follows a recent trend where cybercrime marketplaces are increasingly hosted on the clearnet instead of the dark web, making them more accessible to a broader range of users and possible to promote through search engine optimization.
![EOL Sophos firewalls get hotfix for old but still exploited vulnerability (CVE-2022-3236)](/static/build/img/news/eol-sophos-firewalls-get-hotfix-for-old-but-still-exploited-vulnerability-cve-2022-3236-small.jpg)
Over a year has passed since Sophos delivered patches for a vulnerability affecting Sophos Firewalls that was being actively exploited by attackers, and now they have pushed additional ones to protect vulnerable EOL devices. "In December 2023, we delivered an updated fix after identifying new exploit attempts against this same vulnerability in older, unsupported versions of the Sophos Firewall," the company shared on Monday by updating of the original security advisory.
![Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing](/static/build/img/news/microsoft-warns-of-hackers-exploiting-oauth-for-cryptocurrency-mining-and-phishing-small.jpg)
Microsoft has warned that adversaries are using OAuth applications as an automation tool to deploy virtual machines (VMs) for cryptocurrency mining and launch phishing attacks. "Threat actors...
![Nearly a million non-profit donors' details left exposed in unsecured database](/static/build/img/news/nearly-a-million-non-profit-donors-details-left-exposed-in-unsecured-database-small.jpg)
Close to a million records containing personally identifiable information belonging to donors that sent money to non-profits were found exposed in an online database. Infosec researcher Jeremiah Fowler found 948,029 records exposed online including donor names, addresses, phone numbers, emails, payment methods, and more.
![Major Cyber Attack Paralyzes Kyivstar - Ukraine's Largest Telecom Operator](/static/build/img/news/major-cyber-attack-paralyzes-kyivstar-ukraine-s-largest-telecom-operator-small.jpg)
Ukraine's biggest telecom operator Kyivstar has become the victim of a cyber attack, disrupting customer access to mobile and internet services. "The cyberattack on Ukraine's #Kyivstar telecoms...
![Which cybersecurity controls are organizations struggling with?](/static/build/img/news/which-cybersecurity-controls-are-organizations-struggling-with-small.jpg)
How are organizations performing across cybersecurity controls in the Minimum Viable Secure Product framework? A recent analysis by Bitsight and Google reveals some good and some bad results - and room for improvement. The study analyzed the cybersecurity performance of nearly 100,000 organizations around the world across nine industries.
![Cyber security isn’t simple, but it could be](/static/build/img/news/cyber-security-isnt-simple-but-it-could-be-small.jpg)
Sponsored Feature Most experts agree cybersecurity is now so complex that managing it has become a security problem in itself. Growing complexity, skills shortages, and rising costs have resulted in huge growth in the managed security service provider sector over the last decade.
![Think tank report labels NSO, Lazarus, as 'cyber mercenaries'](/static/build/img/news/think-tank-report-labels-nso-lazarus-as-cyber-mercenaries-small.jpg)
Cybercrime gangs like the notorious Lazarus group and spyware vendors like Israel's NSO should be considered cyber mercenaries - and become the subject of a concerted international response - according to a Monday report from Delhi-based think tank Observer Research Foundation. Author Fitri Bintang Timur argued the term mercenary applies because, as amendments to the Geneva Convention put it, mercenaries are "An entity having the motivation to gain financial or material compensation in return for their willingness to fight for the recruiter's country."
![Microsoft's Final 2023 Patch Tuesday: 33 Flaws Fixed, Including 4 Critical](/static/build/img/news/microsoft-s-final-2023-patch-tuesday-33-flaws-fixed-including-4-critical-small.jpg)
Microsoft released its final set of Patch Tuesday updates for 2023, closing out 33 flaws in its software, making it one of the lightest releases in recent years. Of the 33 shortcomings, four are...