Cyber Security Blogs “The Akira ransomware malware, which was first detected in Finland in June 2023, has been particularly active at the end of the year,” the Finnish National Cybersecurity Center (NCSC-FI) has shared on Wednesday. NCSC-FI has received 12 reports of Akira ransomware hitting Finnish organizations in 2023, and three of the attacks happened

Cyber Security BlogsHow wearing a ‘sock puppet’ can aid the collection of open source intelligence while insulating the ‘puppeteer’ from risks ​Read More

Cyber Security BlogsEmail security provider Cofense outlined some of the most common HR-related scams and phishing campaigns it has observed ​Read More

Cyber Security BlogsIf you’re curious about the world of Capture the Flag (CTF) competitions in cybersecurity, then you’re in for quite the adventure. From cracking complex codes to exploiting vulnerabilities, CTFs offers you a great way to sharpen your skills, connect with like-minded individuals, and, of course, have a bunch of fun along the way.

Cyber Security Blogs A patched privilege escalation vulnerability impacting Microsoft SharePoint servers has been added to the known exploited vulnerabilities (KEV) catalog of the US Cybersecurity and Infrastructure Security Agency (CISA). Citing evidence of active exploitation, CISA has tagged the critical severity bug Microsoft previously released fixes for as part of its June 2023 Patch

Cyber Security BlogsInvestigators from Resecurity’s HUNTER (HUMINT) warn that Indonesia is increasingly being targeted by cyber-threat actors. Investigators from Resecurity’s HUNTER (HUMINT) have found that Indonesia is increasingly being targeted by cyber-threat actors who have staged attacks that pose significant long-term risks to the integrity of the country’s elections. These findings coincide with the critical

Cyber Security BlogsResearchers published a proof-of-concept (PoC) code for the recently disclosed critical flaw CVE-2023-51467 in the Apache OfBiz. Researchers from cybersecurity firm VulnCheck have created a proof-of-concept (PoC) exploit code for the recently disclosed critical flaw CVE-2023-51467 (CVSS score: 9.8) in the Apache OfBiz. In December, experts warned of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource

Cyber Security Blogs Hacktivist groups have purportedly orchestrated a cyberattack on Indian Police and Government Institutions, commencing on January 10th, 2024, with data disclosure coming to light today. The identified threat actors include ‘THE ANONYMOUS BD,’ ‘GARUDA FROM CYBER,’ and ‘SYLHET GANG-SG.’  The cyberattack on Indian government institutions includes DDoS assaults on the Indian Ministry

Cyber Security Blogs A critical vulnerability in GitLab CE/EE (CVE-2023-7028) can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication enabled on their account are safe from account takeover. “We have not detected any abuse of this vulnerability on platforms managed by GitLab, including GitLab.com