Information Security

A recent cybersecurity threat actor has unleashed an alarming automated exploitation campaign, resulting in the infection of approximately 2,000 NetScaler instances with a sinister backdoor. This attack revolves around the exploitation of a critical Citrix vulnerability (CVE-2023-3519) that was disclosed last month as a zero-day, having been exploited since June 2023. The severity of this situation is further exacerbated by

In an alarming development, a persistent and widespread campaign targeting the ministries of foreign affairs of NATO-aligned countries has been uncovered. This targeted cyber-espionage operation has been traced back to Russian threat actors, highlighting the escalating threat to global cybersecurity. Phishing attacks delivering Duke malware One of the primary methods employed by these threat actors is the use of sophisticated

In recent months, a relentless cyber attack campaign originating from China has been targeting the lucrative Southeast Asian gambling sector. This alarming campaign employs sophisticated techniques to deploy Cobalt Strike beacons on compromised systems, posing significant risks to the targeted industry. By examining the modus operandi of the threat actors, we can gain valuable insights into their attack methods and

In the realm of cyber threats, ransomware attacks have become increasingly prevalent, causing significant disruption and financial loss for businesses and organizations worldwide. Among the notable players in this malicious game is the Play ransomware group, whose recent cyberattack campaign has specifically targeted managed service providers (MSPs) globally. With a sophisticated approach that incorporates intermittent encryption techniques, Play aims to

In a bid to bolster the nation’s cybersecurity defenses, the White House has issued a directive mandating federal agencies to update and enhance their cybersecurity safeguards. This move comes as numerous agencies and departments have fallen short in fully complying with critical security practices outlined in President Biden’s executive order. The lag in implementing essential cybersecurity measures has exposed the