Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Cisco VPN Zero-Day exploited by ransomware gangs (CVE-2023-20269) - Insights and best practices for defense

In the tech security scene, we’re always on the lookout for new vulnerabilities, especially when they are already exploited in the wild. The latest zero-day CVE-2023-20269 is hitting Cisco’s Adaptive Security Appliance VPN features. The attack surface scan conducted by IONIX research on a sample of organizations indicates that 13% of these appliances are potentially vulnerable through at least one interface.

Data Security Today: Threats, Techniques & Solutions

Data security is more important than ever. In 2022 alone, over 1,700 organizations worldwide have been affected by compromised data. With organizations relying heavily on technology to store and process sensitive information, the risk of data breaches is constantly rising. This puts data security at the forefront of any organization’s security plan.

10 Mistakes in Cybersecurity and How to Avoid Them

It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable. As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity mistakes that crop up (and how to avoid them).

OT Security: Risks, Challenges and Securing your Environment

Before the revolution of Information Technology (IT), the world experienced the revolution of Operational Technology (OT). Operational Technology is the combination of hardware and software that controls and operates the physical mechanisms of industry. OT systems play an important role in the water, manufacturing, power, and distribution systems that transformed the industry into the modern age. All of these systems function to operate, automate, and manage industrial machines.

Millions of Users on Freecycle are Compromised in Data Breach

Freecycle is an online platform dedicated to helping its users exchange free goods with one another. Freecycle is designed to help reduce waste by helping people give away their unwanted items instead of throwing them away. The platform has more than 7 million users and helps divert huge amounts of waste from landfills each year.

Why a Layered Security Strategy Matters

In the world of cybersecurity, one thing is certain: no system is immune to vulnerabilities and bugs. Even security software, designed to protect your organization, can have its flaws. But before you start to panic, consider this: the presence of these bugs is not unique to any single security provider. In fact, if you were to investigate the history of major security vendors, you would discover that they too have encountered similar problems.

Rubrik Incremental Merge: A New Approach to Oracle Backups

When the well-renowned Oracle database started penetrating the enterprise, database administrators typically backed up to tape and disk, with the former being the preferred target. To support the various tape and disk vendors in the marketplace, Oracle came up with the concept of a media management layer that allowed vendors to provide front-ends to their tape or disk devices.

Qakbot Banking Trojan

Qakbot, also known as Pinkslipbot, Qbot and Quakbot, is a notorious Banking Trojan designed to steal account credentials and online banking session information leading to account takeover fraud. Commonly distributed via malicious unsolicited email (malspam), Qakbot campaigns reportedly deployed ‘Cobalt Strike’ beacons likely in an attempt to move laterally as well as gaining persistency and establishing a robust communication channel back to the threat actor.