Prisma Cloud 2.0: The Industry’s Most Comprehensive CNSP
With the rollout of Prisma Cloud in November 2019, Palo Alto Networks announced a new category in cloud security – the Cloud Native Security Platform (CNSP) – for securing...
The FBI, DHS & CISA Top 10 Most Exploited Vulnerabilities
Two US cyber-security agencies published this week a list of the top 10 most commonly exploited software vulnerabilities across the last four years, between 2016 and 2019.
The report, authored...
Pakistan Telecom Firms Hit By Greenbug Hacking Group
For the past several months, suspected Iranian hackers have been rooting around the IT systems of at least three telecommunications companies in Pakistan, accessing data servers when it suits...
A New Critical Vulnerability Affects vBulletin Forums – Update Now
If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a critical...
How to Protect Your Crypto from Cyber Attacks During Covid
The 1997 indie horror movie Cube posited a dystopic future where unwilling prisoners are systematically dismembered by a high-tech prison. The SARS-CoV-2 pandemic has created an environment for a similar virtualized...
Taiwan Government Targeted by Multiple Cyberattacks: Owlproxy Malware
In April 2020, CyCraft observed highly malicious cyber activity in several Taiwan government agencies. Some of these attacks have been attributed to the same threat actor due to similar...
Schneider Electric Detects Another Stuxnet-like Vulnerability
Trustwave discovered another Stuxnet-like vulnerability in Schneider Electric software, in particular in EcoStruxure Machine Expert (formerly SoMachine), which allows creating projects on Modicon M221 programmable logic controllers.
The vulnerability description CVE-2020-7489 is exactly the...
Exit scams and regulations disrupt global darknet markets
A report published by blockchain forensics firm CipherTrace has detailed significant disruptions to the clandestine darknet marketplace sector following a spate of exit scams during recent months. Despite opportunities for...
AMD and Intel confidential data leaked online after GIGABYTE ransomware attack
We recently discovered that a 7 GB archive of confidential data that purportedly belongs to Taiwanese computer hardware manufacturer GIGABYTE had been leaked on a hacker forum following a...