Craig Anderson

In the ever-evolving landscape of cybersecurity, cross-domain attacks have surfaced as one of the most sophisticated threats, challenging traditional security measures. These attacks exploit vulnerabilities across various domains, such as endpoints, identity systems, and cloud environments, allowing adversaries to infiltrate organizations, move laterally, and avoid detection. As eCrime groups and state-sponsored adversaries increasingly rely on cross-domain tactics, it has become

A critical security flaw uncovered in GFI KerioControl firewalls has put a significant number of systems at risk, specifically affecting versions 9.2.5 to 9.4.5. This vulnerability, identified as CVE-2024-52875, was detected by security researcher Egidio Romano in November 2024 and involves a carriage return line feed (CRLF) injection attack. This particular flaw can lead to HTTP response splitting and subsequent

In an alarming development that underscores the rising threats in the digital landscape, Russian cybercriminals have developed a malicious WordPress plugin dubbed PhishWP, ingeniously designed to transform e-commerce websites into highly convincing phishing pages. This pernicious plugin, camouflaged within trusted and widely used e-commerce platforms, dupes unsuspecting users by replicating authentic-looking online payment processes akin to renowned services like Stripe.

In an unsettling development, cybercriminals are exploiting a malicious WordPress plugin known as PhishWP to transform legitimate websites into dangerous phishing traps aimed at stealing sensitive customer payment data. This plugin creates deceptive payment pages that closely resemble those of well-known payment providers like Stripe, fooling users into divulging critical information such as credit card details and personal identification data.

In the ever-evolving landscape of cybersecurity threats, FireScam has emerged as a particularly dangerous malware targeting Android devices. Disguised as a “Telegram Premium” application, this sophisticated information-stealing and spyware malware is spread primarily via a phishing website on GitHub.io. The site masquerades as the legitimate RuStore app store, usually associated with the Russian internet group VK. Once downloaded and installed,