Craig Anderson

Recent cybersecurity research revealed a set of critical HTTP Response Splitting vulnerabilities in Kerio Control, a widely used Unified Threat Management (UTM) solution developed by GFI Software. The impact of these vulnerabilities is severe, potentially allowing attackers to escalate low-severity issues into one-click remote command execution (RCE) attacks that provide root access to the firewall system. These vulnerabilities, collectively tracked

Malvertising campaigns targeting graphic design professionals have been increasing, presenting a significant threat to enterprise security. By exploiting Google Search ads, malicious actors direct users to harmful links under the guise of legitimate graphic design tools and software. These campaigns, which began ramping up on November 13, 2024, have managed to bypass security measures and target unsuspecting professionals in the

As the holiday season approached, Krispy Kreme, the beloved American doughnut company, found itself grappling with an unforeseen cyberattack. This breach caused significant disruption to its online ordering system, a crucial component of its operations during peak busy periods. Unfortunately, this incident highlights a broader issue plaguing many US retailers: the growing susceptibility to cybersecurity threats and operational vulnerabilities that

The complexities of modern cybersecurity incidents demand an in-depth understanding of the interplay between various cybercrime activities and the measures taken to combat them. Recently, numerous security breaches and cyberattacks have spotlighted the vulnerabilities within governmental and corporate infrastructures, as well as the proactive steps taken by law enforcement and international collaborations to stymie these threats. Through an analysis of

The U.S. government has revealed charges against Guan Tianfeng, a Chinese national linked to extensive cyberattacks on over 81,000 Sophos firewall devices worldwide in 2020. Guan, associated with Sichuan Silence Information Technology Company, is accused of computer and wire fraud conspiracy, and developing a zero-day vulnerability (CVE-2020-12271), which allowed unauthorized access to, and data exfiltration from, Sophos firewalls. The SQL