Guest Post: Examining the history of password security and how it's shaping the future.

Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware including PhoenixMiner and lolMiner on infected machines.

Rust is a programming language guaranteeing memory and thread safety while still being able to access raw memory and hardware. This sounds impossible, and it is, that’s why Rust has an unsafe keywo…

By Oleg Zaytsev (Guardio Labs)

An important tool in a threat hunter's tool belt.

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files - GitHub - boringtools/git-alerts: Tool to detect and monitor GitHub org users' publ...

HijackLoader | Learn its tactics, evasion techniques, and modular architecture in our in-depth analysis.

New research shows that employees access sensitive data on personal devices–
often to get around security.

Explore the growing threat of insider attacks in the realm of cybersecurity. From defining what constitutes an insider threat, its various types, to strategies for mitigating such risks, this comprehensive guide covers all aspects of this pressing issue.…

Cloud Security Explained for Businesses- How it Plays a Pivotal Role in Ensuring the Confidentiality, of Your Company Data

XWiki is an open-source knowledge repository which is primarily meant for enterprise use, i.e. intra-company knowledge storage and sharing. As per its website, XWiki is a "second generation" wiki,...

Identify and harden your External Security Posture with the leader. Let us manage time-consuming tasks and focus on remediation

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently…

It was the year of the Linux desktop 1978. Old yellowed computers were not yet old, nor yellowed. Digital Equipment Corporation released the first popular terminal to support a standardized in-band encoding for control functions, the VT100.

Our Research team discovered critical code vulnerabilities in Proton Mail, Skiff, and Tutanota. This post covers the technical details of the XSS vulnerability in Skiff.