Cyber Security

A Sophisticated Russian Campaign Targets Hundreds of Organizations with Fake Event Invites and a Backdoor Payload A recent cybersecurity investigation has uncovered a complex and targeted attack campaign carried out by Russian threat actors, dubbed “Star Blizzard.” The operation has already compromised over 100 organizations worldwide, highlighting the need for vigilance in today’s digital landscape. … Read more

A new attack technique has been discovered that exploits a weakness in Linux systems, allowing attackers to access sensitive memory information despite existing security measures. The Spectre-v2 BTR (Branch Target Buffer) attack, disclosed on September 28th, threatens organizations relying on vulnerable Linux distributions. At its core, the Spectre-v2 BTR exploit leverages an inherent flaw in … Read more

French Tax Data Theft Exposes Vulnerability in Password Security A shocking case of data theft has come to light, where hackers stole sensitive tax information from a French government agency after obtaining staff passwords through social engineering tactics. The breach went undetected for a staggering seven weeks, highlighting the ongoing threat of insider attacks and … Read more

Microsoft’s latest Windows 11 feature update has landed, marking a significant shift in how the company delivers new features to its users. The Windows 11 2026 Update (26H2) is now rolling out globally, but don’t expect it to be a drastic change from what you’re already familiar with. The update marks a departure from Microsoft’s … Read more

Two former US Air Force members have been sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The attacks, which targeted businesses across the country, resulted in losses exceeding $2 million. Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, … Read more

A wave of malicious npm packages has compromised thousands of developers’ WhatsApp accounts, exposing their personal and professional communication channels to unauthorized groups. The affected packages, which were used in various projects across the globe, secretly added their victims’ phone numbers to WhatsApp groups without consent, potentially allowing hackers to intercept sensitive information. The issue … Read more

A critical security flaw has been patched by Kiteworks, a leading provider of secure file sharing and collaboration solutions. The vulnerability, which allows for cross-domain privilege escalation, was discovered during a precautionary shutdown of the company’s systems that lasted nearly nine hours. The issue lies in the way Kiteworks handles access controls between different domains … Read more

Cybersecurity experts are sounding the alarm over a new attack variant that exploits vulnerabilities in Linux systems, even when existing defenses are in place. The Spectre-v2 BTR (Branch Target Buffer) attack is a serious concern for organizations that rely on Linux-based infrastructure, as it can leak sensitive memory information, potentially allowing hackers to gain unauthorized … Read more

A previously unknown malware framework, dubbed “NeedyMantis,” has been discovered by Microsoft Threat Intelligence providing attackers with long-term access to compromised networks. This sophisticated tool has been used in targeted intrusions against organizations such as telcos, universities, medical nonprofits, and government contractors. The discovery reveals a potential blind spot for defenders who focus primarily on … Read more

As attackers increasingly target organizations’ identities as their first line of defense against data breaches, conventional Identity Governance strategies are no longer enough to keep pace with sophisticated threats. With the average organization’s attack surface expanding exponentially due to cloud app and external account integrations, businesses need real-time insight into identity events to stay secure. … Read more