Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

How to Convert a Laravel Web App to a Mobile App

Mobile app usage is increasing, and it greatly affects the digital sector. Statista indicates that over half of the global web traffic is now from mobile devices, and eMarketer states that users are averaging 4.2 hours daily on their phones. For companies with existing Laravel web applications, moving to mobile can make apps more accessible and boost user engagement. This guide will walk you through transforming your Laravel web app into a mobile app, focusing on enhancing performance, security, and user experience.

6 Apps to improve safety and efficiency when managing your financials and spending while traveling abroad

If you're the type of traditional traveler who only considers palpable things to be important when prepping for an international trip, you may find this article eye-opening. Nevertheless, even if your phone is full of money management and financial planning apps, you should understand there's always room for improving your scheme. Hopefully, the importance of sound money and financial management before and during your trip abroad is non-negotiable to you. In that case, you're likely more quickly determining which solutions best suit your needs and budgetary requirements.

Upgrade Your Ride: Tips for Junking Your Old Car and Getting a New One

Are you tired of maintaining an old, unreliable car that costs more to repair than it's worth? If your car takes up space in your driveway and causes more stress than it's worth, it might be time for an upgrade. Junking your old vehicle and purchasing a new or used one can bring peace of mind, improve your daily commute, and allow you to drive something more efficient and modern. Below, we'll cover the benefits of junking your car, compare new vs. used options, and share tips for maximizing your trade-in value.

Mapping the DCRat attack to the MITRE ATT&CK framework

The IT industry has seen an unshakable surge in malware attacks. According to SonicWall’s 2022 Cyber Threat Report, almost 2.8 billion malware attacks were detected in 2022. Approximately 30% of these malware attacks were carried out using emails containing malicious links and attachments. On June 10, 2022, one such malware, Dark Crystal, also known as DCRat, jolted Ukraine. It is a remote access Trojan (RAT) that has been receiving regular upgrades and new modules since 2018.

Say goodbye to IP conflicts: How DDI Central prevents and resolves IP address conflicts for smooth network operations

In a well-functioning network, each device communicates seamlessly with others, relying on unique IP addresses to maintain its identity and keep everything in sync. But what happens when this system breaks down, and two devices attempt to use the same address? IP conflicts are more common than you might think, causing unexpected disruptions that slow down or even halt network operations.

Taming API Sprawl: Best Practices for API Discovery and Management

APIs are the backbone of interconnected applications, enabling organizations to innovate, integrate, and scale rapidly. However, as enterprises continue to expand their digital ecosystems, they often encounter a common and complex challenge: API sprawl. Unchecked, API sprawl can lead to increased security risks, inefficient resource utilization, and the frustrating experience of redundant or hard-to-locate services across teams. Postman details the explosive growth in APIs in their State of API report.

T(AI)WANted: How the global surge in AI likely caused an increase in Taiwan-targeted cybercrime

Initial access brokers (IABs) facilitate access for ransomware groups, data brokers, and advanced persistent threat groups (APTs) into corporate networks. They operate in an established, lucrative market, often on cybercriminal forums which are characterised by rigid rules and conventions. Our report explaining the illicit activities of IABs can be viewed here.

Kairos extortion group turns to initial access brokers

Cyjax recently identified a new financially-motivated extortion group going by the name Kairos, which shares data stolen from its victims on a data-leak site (DLS). An alleged spokesperson for the group, named ‘KairosSup’ made a bid on an initial access broker (IAB) listing on a prominent Russian-language cybercriminal forum. It is of note that the spokesperson’s name is likely styled after the representative of prolific ransomware group LockBit, who is called ‘LockBitSupp’.

CVE-2024-10524 Wget Zero Day Vulnerability

While researching CVE-2024-38428 in GNU’s Wget, our team found a new 0-day vulnerability. The vulnerability, later assigned CVE-2024-10524, may lead to various types of attacks – including phishing, SSRF, and MiTM. These attacks can have severe consequences such as resource restriction bypass and sensitive information exposure. Upon discovering this vulnerability, our team responsibly disclosed it to the Wget maintainers. A patch was released on November 11 and is included in Wget 1.25.0.

Take Control with Torq's AI Data Transformation

Data interoperability is the backbone of building reliable and efficient hyperautomated workflows. However, manipulating and formatting massive amounts of data from various sources — especially in complex JSON files — can feel overwhelming and consume significant time and resources, particularly for those still gaining technical expertise. Teams often lack or have maxed out dedicated resources to wrangle this data.