Adobe Experience Manager (AEM) is a widely used content management solution for building digital customer experiences, like websites, mobile apps and forms. Comprehensive and easy to use, AEM has become…
Microsoft officially announced the attacks after Reuters obtained an email sent to customers which explained that the threat group Nobelium stole customer-service-agent credentials to gain access and launch attacks against…
The seller, “GOD User” TomLiner, stated they were in possession of the 700 million records on June 22 2021, and included a sample of 1 million records on RaidForums to…
This specific Cisco ASA vulnerability is a cross-site scripting (XSS) vulnerability tracked as CVE-2020-3580. Cisco was the first to disclose the vulnerability as they issued a fix in October 202o…
Ransomware is an ever-evolving form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom…
The first campaign we called ‘DotDat’. It distributed ZIP attachments that claimed to be some sort of cancelled operation or compensation claims with the names in the following format [document…
Security researcher Jeremiah Fowler explained that the trove was left online with no password protection by US hosting provider DreamHost. The 814 million records he found were traced back to…
In this posting they analyze Crackonosh. They look first at how Crackonosh is installed. In their analysis they found that it drops three key files winrmsrv.exe, winscomrssrv.dll and winlogui.exe which…
Serious vulnerabilities exist every day in certain industries, including utilities, public administration, and professional services, according to testing data. Finance and insurance companies — an industry sector frequently targeted in…
The agency that is responsible for creating standards that US government agencies use as their framework has released draft guidance on ransomware: preventative measures to possibly prevent an attack; defending…