Author: Admin

Cybersecurity is in need of a reckoning. Global cybersecurity spend reached a record $79.2 billion in 2023 and is expected to grow by almost 10% this year – a reflection of the evolving, and increasingly nefarious threats in our hyper-digital world. On paper, that’s a good thing. More investment should mean better protection, right? Yes, it should. But, despite the rise in spending, in the first half of 2024 alone there was still a 14% increase in…

A new malware strain, ELF/Sshdinjector.A!tr, has been linked to the DaggerFly espionage group and used in the Lunar Peek campaign to target Linux-based network appliances. Its primary function is data exfiltration. How the Malware Works Uncovered by cybersecurity researchers at FortiGuard Labs, the malware operates using multiple binaries that work together to infect a system: Dropper: Checks if the system is already infected; if not, it deploys malicious binaries libsshd.so: A modified SSH library that communicates with a…

A new phishing campaign has been observed targeting organizations using Microsoft Active Directory Federation Services (ADFS), leveraging spoofed login pages to steal credentials and bypass multi-factor authentication (MFA). According to cybersecurity researchers at Abnormal Security, the attack exploits ADFS, a single sign-on (SSO) solution that allows users to authenticate across multiple applications with a single set of credentials. Threat actors craft highly convincing phishing pages that mirror the legitimate ADFS login portals of targeted organizations,…

Infostealers continued to grow in popularity on the cybercrime underground last year, with credentials from password stores appearing in 29% of malware samples analyzed by Picus Security. The security vendor’s Red Report 2025 examined over one million malware samples and mapped more than 14 million malicious actions and 11 million instances of MITRE ATT&CK techniques, in order to better illuminate the threat landscape. It revealed a three-fold increase in the share of malware strains targeting credential…

In the complex world of cybersecurity, one fundamental truth remains constant: you can’t protect what you don’t know exists. This is why data discovery stands as the cornerstone of any effective data security strategy. For Chief Information Security Officers (CISOs) and security professionals, understanding the critical importance of comprehensive data discovery can mean the difference between a robust, responsive security posture and a vulnerable one. Data discovery is not just a preliminary step; it’s the…