Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

July 2024

Savvy Security: Unpacking key SASE vendor selection criteria

Many companies are stepping up their security measures to protect against cyber risks associated with the increasing use of cloud services and remote work. As a result, the global deployment of Secure Access Service Edge (SASE) is on the rise. According to the 2024 Gartner CIO and Technology Executive Survey, 39% of respondents have already deployed SASE or plan to do so within the next 24 months.

Rapid Data Heist: Akira Ransomware Group's Two-Hour Attack on Veeam Servers

In a startling development, the Akira ransomware gang has demonstrated a dramatic reduction in the time it takes to exfiltrate data from compromised servers. According to the BlackBerry Threat Research and Intelligence Team, this cybercriminal group managed to steal data from a Veeam server in just over two hours during a June attack on a Latin American airline.

Analyzing ViperSoftX: The Use of CLR and AutoIt for Stealthy Malware Operations

The ViperSoftX info-stealing malware has evolved, now utilizing the common language runtime (CLR) to covertly execute PowerShell commands within AutoIt scripts. This sophisticated approach allows ViperSoftX to bypass traditional security measures and remain undetected, posing a significant threat to cybersecurity. Leveraging CLR and AutoIt for Stealth Operations CLR, a core component of Microsoft’s.NET Framework, functions as the execution engine for.NET applications.

Safeguarding Your Collaboration Tools: Tackling the New Favorite Targets of Attackers

Secrets in collaboration tools are becoming prime targets for attackers. Reduce your attack surface by extending GitGuardian automated secrets detection capabilities to Slack, Jira, Confluence, or Microsoft Teams. Ensure security wherever your teams collaborate!

NEW! PHP 8.3 support, Online Licensing tools and 25% off at ioncube.com

Our latest ionCube Loader update supports the running of PHP 8.2 files (encoded with ionCube Encoder 13) on PHP 8.3 machines! ionCube Loaders are extra special in that we are sometimes able to offer extended compatibility allowing existing encoded files to run on future versions of PHP. With PHP 8.2 encoded files you are now able to run them on PHP 8.3 even if they were encoded before this new Loader version was released.

CVE-2024-4879, CVE-2024-5178, CVE-2024-5217: ServiceNow MID Server Vulnerabilities Resulting in Unauthorized Code Execution

On July 10, 2024, ServiceNow disclosed a series of critical vulnerabilities impacting their platform, identified as CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217. These vulnerabilities were responsibly disclosed to ServiceNow in May 2024 by Assetnote, a cybersecurity firm. ServiceNow responded by patching hosted instances in June 2024.

How to Stop Data Leaks in Their Tracks

Data leaks are a growing concern for organizations due to the rising volume of sensitive information stored digitally. Leaks occur when sensitive data is inadvertently exposed, and they can easily lead to cyber attacks, reputational damage, and enormous financial costs. The best way to protect against them is to stop them from occurring in the first place. In this blog, we’ll delve into the common causes of leaks and best practices to bolster data security and prevent data leaks effectively. ‍

The most common entry points for ransomware attacks

In this insightful discussion, Anand Prahlad, CEO and President of Parablu, poses a crucial question about ransomware threats: "What do you think are some of the most common entry points for ransomware into organizations? And do you think organizations are doing enough to defend themselves in these vulnerable areas?" Ashok Kumar Ratnagiri, Associate VP of Information Security at EdgeVerve and Co-Founder of Security BSides Bangalore Community, shares his expert insights on this pressing issue.

CVE-2024-30078: Patch Your Wi-Fi Now!

The relentless battle against cyber threats continues, and CVE-2024-30078 stands as a stark reminder of the ever-present need for vigilance. A critical vulnerability (CVE-2024-30078) has been identified in Wi-Fi drivers for various Microsoft Windows versions. This flaw allows attackers within Wi-Fi range to remotely execute malicious code (RCE) on vulnerable systems. Immediate patching is recommended.

What Is Google Chat Scam and How to Spot and Stop It

Google Chat is a popular communication software that allows you to share content and send messages in real time. Individuals use it for personal communication or collaboration with teams at work. However, as its popularity is increasing, people are using it as their primary form of communication.

How to Stay Away from LinkedIn Scams

LinkedIn is the world's largest professional networking service for accountants, policemen, politicians, advertising professionals, business executives, college students, investment bankers, and consultants. Most use LinkedIn to connect with others and help with career development, new business contacts, and professional networking. However, job scams and other online cybercriminals use LinkedIn features for fraudulent activities.