BadSuccessor: Unpatched Microsoft Active Directory attack enables domain takeover
Researchers have discovered a new attack path in Active Directory (AD) environments that use Windows Server […]
What Is Formjacking and How Can You Detect It?
Formjacking Meaning Imagine visiting your favorite e-commerce site, entering your credit card details to make a […]
Cyberangriff auf Arla Deutschland
Das deutsche Arla-Werk in Upahl wurde von Cyberkriminellen angegriffen. Arla Foods Deutschland Arla Foods mit Hauptsitz […]
Ransomware-Bande BlackBasta hat neuen Malware-Favoriten
Die BlackBasta-Bande scheint ihr Repertoire um eine neue, modulare Malware erweitert zu haben. In einem LinkedIn-Post […]
Critical flaw in OpenPGP.js raises alarms for encrypted email services
A newly discovered flaw in OpenPGP.js, a JavaScript cryptography library used by services like Proton Mail, […]
Trust becomes an attack vector in the new campaign using trojanized KeePass
A known crew of cybercriminals has weaponized the widely used, open-source KeePass password manager with malware […]
GitHub package limit put law firm in security bind
A $1 billion law firm last week learned a critical cybersecurity lesson: Even something as innocuous […]
Threat intelligence platform buyer’s guide: Top vendors, selection advice
The bedrock of a solid enterprise security program begins with the choice of an appropriate threat […]
Software Bill of Material umsetzen: Die besten SBOM-Tools
Nur wenn Sie wissen, was drinsteckt, können Sie sich sicher sein, dass alles mit rechten Dingen […]
Poor DNS hygiene is leading to domain hijacking
Threat actors continue to find ways of hijacking domains thanks to poor DNS record-keeping and misconfigurations […]