### Main Points: – A Taiwanese research institute with a focus on computing technology was compromised by nation-state actors believed to be linked to China. – This cyberattack began around mid-July 2023, aiming to install backdoors and tools such as ShadowPad and Cobalt Strike. – Cisco Talos was responsible for uncovering and reporting this cybersecurity
Read More
In an increasingly digital world, the demand for skilled cybersecurity professionals is at an all-time high. As cyber threats evolve and become more sophisticated, the need for robust security measures grows exponentially. The future of cybersecurity careers in the United States looks promising, with numerous opportunities for growth, innovation, and impact. Growing Demand for Cybersecurity
Read More
In mid-July 2024, CrowdStrike, a leading cybersecurity firm, experienced a significant incident that has drawn considerable attention within the tech community and beyond. This event highlights the persistent and evolving nature of cybersecurity threats and the complexities involved in managing advanced security solutions. What Happened? On July 19, 2024, CrowdStrike released a content update for
Read More
In today’s digital age, cyber security has become a critical field, with threats evolving at an unprecedented pace. As organizations strive to protect their data and infrastructure from malicious actors, the demand for skilled cyber security professionals is skyrocketing. One of the most effective ways to demonstrate your expertise and commitment to this field is
Read More
Devious Loan Apps: Beware of the Digital Pickpocket! Cybersecurity researchers have unearthed 18 malevolent loan apps on the Google Play Store. These apps have been downloaded over 12 million times. Despite appearing trustworthy, they aim to defraud users with high-interest rates and deceitful descriptions. Simultaneously, these apps collect victims’ personal and sensitive data. Malicious Apps
Read More
A PoolParty You Don’t Want An Invitation To: Eight New Process Injection Techniques Revealed An assortment of eight new process injection techniques, grouped under the moniker of “PoolParty”, shows potential for executing code in Windows systems evasively. This cocktail of techniques can bypass endpoint detection and response (EDR) systems. SafeBreach researcher Alon Leviev touts these
Read More
Main points • Researchers from Vrije Universiteit Amsterdam have exposed a new side-channel attack labelled SLAM. • This attack has the potential to reveal sensitive data from kernel memory in current and future CPUs from Intel, AMD, and Arm. • SLAM is an exploit for Spectre that is based on a new feature in Intel
Read More
GuLoader Goes Undercover: A Mutable Malware Menace Main Points: Threat hunters have exposed new evasion tactics used by a malware named GuLoader. GuLoader’s fundamental functionality has stayed relatively the same, raising concerns over its increasing complexity and time-consuming analysis. Malware GuLoader Reinvents Its Camouflage Tactics With a magic trick like ability to constantly shift its
Read More
Frightening Firmware Foibles: How Security Flaws Impact 5G Modems Main Points Major chipset vendors, MediaTek and Qualcomm, are affected by security flaws in 5G network modem firmware. These vulnerabilities impact a range of devices, from USB and IoT modems to hundreds of smartphone models running Android and iOS. The collective of 14 issues, dubbed as
Read More
Ransomware Attacks: A New Player in the Cyberspace – Ransomware attacks are now a significant consideration for cybersecurity – Increasing prominence of Ransomware-as-a-Service (RaaS) – RaaS allows people with limited technical expertise to conduct large-scale attacks Ransomware Attacks: The New Cyber Boogeyman Ransomware attacks have become as common as your dad making bad jokes at
Read MoreNo products in the cart.