A cyber incident at Almaviva, a key contractor for Italy’s national railway group FS Italiane, has resulted in a massive cache of internal documents appearing on the dark web. The scale of the leak...
Unwanted programs disguised as gaming software have once again drawn the attention of cybersecurity researchers. The Tsundere botnet, which surfaced this past summer, has been steadily expanding its reach, targeting Windows users through an...
GreyNoise has recorded a dramatic surge in automated requests targeting Palo Alto Networks’ GlobalProtect authentication portals. The scale of this spike is highly atypical: within just 24 hours, the volume of network sessions hitting...
BitlockMove Lateral Movement via Bitlocker DCOM & COM Hijacking. This Proof of Concept (PoC) for Lateral Movement abuses the fact, that some COM Classes configured as INTERACTIVE USER will spawn a process in the context of...
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo Security team. Researchers found that a group of threat actors has launched a large-scale operation, dubbed...
Experts in cybersecurity report the emergence of a new automated credential-theft toolkit whose sophistication continues to evolve. In mass-scale schemes, threat actors are increasingly adopting inventive techniques, and one such toolkit — Sneaky 2FA...
A major outage in Cloudflare’s infrastructure became an unexpected test of resilience for countless companies. On 18 November, disruptions across the provider’s services repeatedly knocked websites offline worldwide, and some customers attempted to temporarily...
Germany is strengthening the protection of its digital and physical infrastructure. After a brief round of deliberations, the Bundestag approved a law that aligns German legislation with the European NIS2 directive and establishes unified...
Microsoft has reported the largest cloud-targeted DDoS attack ever recorded, detected on one of its nodes in Australia. The company’s infrastructure automatically identified and neutralized an onslaught reaching 15.72 Tbps and nearly 3.64 billion...
xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn’t interact directly with...
The recent surge in activity surrounding an XWiki vulnerability underscores how swiftly weaknesses in widely used platforms can be transformed into launchpads for large-scale attacks. The unfolding pattern makes clear that once the first...
Logitech has informed the U.S. Securities and Exchange Commission (SEC) that it experienced unauthorized data exfiltration as a result of a previously unknown vulnerability in third-party software. The incident involved targeted access to a...