Information Security

Creating An AI Honeypot To Engage With Attackers Sophisticatedly

In cybersecurity, a honeypot is a bait system specifically designed to attract and analyze cyber-attacks, functioning as a trap for…

1 year ago

WordPress To Mandate 2FA for Theme And Plugin Developers

Beginning on October 1st, 2024, WordPress will mandate two-factor authentication (2FA) for plugin and theme creators as a new security…

1 year ago

Payment Gateway Platform SLIM CD Data Breach, 1.7 Million Users Data Exposed

The Slim CD, Inc., a prominent payment processing gateway for US and Canadian merchants, has disclosed a data breach affecting…

1 year ago

New Emansrepo Malware Weaponizing HTML Files To Attack Windows Users

Emansrepo is a Python infostealer that was discovered by the FortiGuard Labs in August 2024 and has been disseminated through…

1 year ago

Hackers Delivers Lumma Stealer Via Public GitHub Commands

Threat actors often target the popular code repository platform "GitHub" due to it's wide use, and features that this platform…

1 year ago

Iran State-Sponsored Hackers Intelligence Operations Using Fake Job Offers

Mandiant has discovered one of the unusual Iranian counterintelligence activities that focuses on prospective agents of foreign intelligence services, especially…

1 year ago

GitHub Vulnerability “ArtiPACKED” Trigger RCE Exploit to Hack Repositories

The research identifies a critical security vulnerability in GitHub Actions artifacts, enabling unauthorized access to tokens and secrets within CI/CD…

1 year ago

Sonos Smart Speaker Vulnerability Let Attackers Execute Remote Code

In the beginning of August 2024, Sonos released a security advisory in which they fixed two security vulnerabilities that were…

1 year ago

ERP Provider Exposes 769 Million Records, Including API Keys And Email Addresses

A massive data breach involving ClickBalance, one of Mexico's largest Enterprise Resource Planning (ERP) technology providers, has been uncovered by…

1 year ago

Critical Splunk Vulnerability Exploited Using Crafted GET Commands

Splunk Enterprise is one of the many applications Splunk offers for security and monitoring purposes. It allows organizations to search,…

1 year ago