Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks
Cybersecurity researchers have shed light on a new malware campaign that makes use of a PowerShell-based shellcode loader to deploy...
Year: 2025
Sednit abuses XSS flaws to hit gov’t entities, defense companies
Operation RoundPress targets webmail software to steal secrets from email accounts belonging mainly to governmental organizations in Ukraine and defense...
Operation RoundPress
This blogpost introduces an operation that we named RoundPress, targeting high-value webmail servers with XSS vulnerabilities, and that we assess...
IBM Reasserts Its Identity: A Modern Security Partner Rooted in Experience
At the 2025 RSA Conference, IBM delivered a clear message: It is not just participating in the evolving identity security...
Ivanti Endpoint Manager Mobile Authentication Bypass and Remote Code Execution Vulnerability (CVE-2025-4427/CVE-2025-4428)
Recently, NSFOCUS CERT detected that Ivanti issued a security advisory to fix the authentication bypass and remote code execution vulnerabilities...
Google fixed a Chrome vulnerability that could lead to full account takeover
Google fixed a Chrome vulnerability that could lead to full account takeover Pierluigi Paganini May 16, 2025 Google released emergency...
Are You Using the Right SSPM Software? | Grip Security
When SSPM tools first entered the market, they addressed an urgent and growing need: identifying risky misconfigurations before attackers did....
Securing ICAM in spacecraft-based missions
Whether your operations are orbiting Earth or heading for the Moon, there’s risk if you’re waiting for a login to...
[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications
Modern apps move fast—faster than most security teams can keep up. As businesses rush to build in the cloud, security...
O que é um ataque cibernético? Tipos e prevenção
A segurança digital se tornou uma prioridade inegociável. Com o avanço da tecnologia, surgem também novas ameaças digitais e uma...
RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check”
RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check Ah, RSA. That yearly theater (Carnival? Circus? Orgy? Got any better synonyms,...
Nova Scotia Power discloses data breach after March security incident
Nova Scotia Power discloses data breach after March security incident Pierluigi Paganini May 15, 2025 Nova Scotia Power confirmed a...
Proofpoint Signs Definitive Agreement to Acquire Hornetsecurity
Strategic acquisition marks significant milestone in advancing Proofpoint’s mission to deliver human-centric security solutions to businesses of all sizes across...
How Protected Are Your Automated Systems?
Are Your Machine Identities Safe? Non-Human Identities (NHIs) and Secrets Security Management present a groundbreaking approach to data security. But...
Is Your Cloud Truly Safe from Invisible Threats?
Why Do Cloud Security Gaps Exist? Can we confidently claim to have sealed all potential breaches? The truth is, despite...
