Cyber Security Blogs The second week of the new year has arrived, and with it comes 2024’s first Microsoft Patch Tuesday. This time around, Microsoft has fixed 53 vulnerabilities, including 2 critical ones. Perhaps as a new year’s gift to patch writers, there have been no zero days reported (that we know of), and none

Cyber Security Blogs After the purported data of nearly 950,000 customers was disclosed on a hacking forum, well-known athleisure clothing company Halara launched an investigation into a potential data breach. After being established in 2020, the Hong Kong company gained enormous popularity on TikTok thanks to the numerous videos it posted advertising its apparel. According

Cyber Security Blogs Sebastien Raoult of ShinyHunters was ordered to pay $5,000,000. The U.S. District Court in Seattle sentenced Raoult to three years in prison. Raoult had previously admitted guilt in September 2023 to conspiring to commit wire fraud and aggravated identity theft, for which he could have received a maximum sentence of 27 years

Cyber Security Blogs In the fast-paced digital landscape, the battle against cyber threats is an ongoing saga. In a world where businesses and individuals heavily depend on technology for diverse aspects of their lives, it is paramount to grasp the risks linked with cyber threats and adopt proactive measures to shield our digital assets. As

Cyber Security Blogs At the end of 2023, the nefarious UAC-0050 group loomed in the cyber threat arena, targeting Ukraine using Remcos RAT, a common malware from the group’s offensive toolkit. In the first decade of January 2024, UAC-0050 reemerges to strike again, exploiting Remcos RAT, Quasar RAT, and Remote Utilities.  UAC-0050 Offensive Activity Overview

Cyber Security BlogsThis blog delves into the Phemedrone Stealer campaign’s exploitation of CVE-2023-36025, the Windows Defender SmartScreen Bypass vulnerability, for its defense evasion and investigates the malware’s payload. ​Read More

Cyber Security BlogsCISA’s advisory provides mitigations for vulnerabilities in ICS products used in critical infrastructure industries like energy, manufacturing and transportation ​Read More

Cyber Security Blogs By Dan Hopkins, VP of Engineering at StackHawk IT modernization and digital transformation initiatives, combined with faster software deployment lifecycles, has caused an exponential increase in the size and scale […] The post Zombie APIs: The Scariest Threat Lurking in The Shadows? appeared first on Cyber Defense Magazine. ​Read More

Cyber Security Blogs By Roger Spears – Cybersecurity Project Manager, Schneider Downs One of the primary pillars of cybersecurity is having a “defense in depth” strategy, which means layering defensive security measures to […] The post 7 Steps to Build a Defense in Depth Strategy for Your Home appeared first on Cyber Defense Magazine. ​Read