Cyber Security News

In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor…

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall ShortRead More

China’s National Computer Virus Emergency Response Center (CVERC) has doubled down on claims that the threat actor known as the Volt Typhoon is a fabrication of the U.S. and its allies. The agency, in collaboration with…

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking CampaignsRead More

Cybersecurity researchers have disclosed a new malware campaign that delivers Hijack Loader artifacts that are signed with legitimate code-signing certificates. French cybersecurity company HarfangLab, which detected the activity at the start of the month, said the…

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing CertificatesRead More

The maintainers of the Jetpack WordPress plugin have released a security update to remediate a critical vulnerability that could allow logged-in users to access forms submitted by others on a site. Jetpack, owned by WordPress maker…

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million SitesRead More

A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance (CSA) a zero-day to perform a series of malicious actions. That’s according to findings from Fortinet FortiGuard Labs, which said…

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network InfiltrationRead More

The link between detection and response (DR) practices and cloud security has historically been weak. As global organizations increasingly adopt cloud environments, security strategies have largely focused on “shift-left” practices—securing code, ensuring proper cloud posture, and…

5 Steps to Boost Detection and Response in a Multi-Layered CloudRead More