Medical Device Security

July 7, 2026

Securing Cloud Deployment in AWS, Azure, & GCP

Cloud computing has become a central component of IT infrastructure. Many organizations use cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) to host applications, store data, and support business operations. While cloud adoption provides scalability, flexibility, and cost savings, it also introduces new security challenges.

June 23, 2026

Securing Software Supply Chain Deployments

Nowadays, many organizations rely on open-source libraries, third-party APIs, cloud services, etc., rather than building software solely from in-house code. While this does speed up development, it creates a much larger attack surface. A single compromised dependency, malicious software update, or poorly secured build pipeline can create widespread security issues across connected systems. Software supply chain attacks are especially dangerous because cybercriminals are increasingly shifting away from directly targeting a single organization. Instead, they compromise the tools, vendors, or software components trusted by many organizations simultaneously.

May 7, 2026

Meet Mythos: The AI Changing the Rules of Cybersecurity

Mythos is an advanced AI system capable of finding software vulnerabilities. It can also find zero-day vulnerabilities, previously undisclosed software flaws that remain unpatched, making them especially dangerous if identified by malicious actors. Mythos can generate exploits and simulate attacks without requiring much human input. Instead of it taking days or weeks for a skilled researcher to discover serious vulnerabilities, Mythos can discover them in as little as hours.

April 23, 2026

Bridging the Gap Between AI Productivity and Secure Development

Artificial intelligence can improve efficiency by reducing the time required to complete many development tasks, but it is not foolproof.

January 27, 2026

Quantum Computing and the Future of Encryption

Quantum computing applies the laws of quantum physics to information processing, enabling certain calculations to be performed far more efficiently than is possible with traditional computing systems. Despite its potential benefits, this technological shift introduces serious challenges for the cryptographic methods that currently protect both transmitted and stored data.

December 31, 2025

Deepfakes, Vishing, and AI: The Next Frontier of Cyber Manipulation

Rather than targeting software flaws, many attackers focus on influencing how people think and respond.

December 18, 2025

Cybersecurity for Utilities: Safeguarding the Backbone of Modern Society

November 20, 2025

Cybersecurity Challenges and Defense Strategies for Military Drones

September 2, 2025

Cybersecurity and Autonomous Vehicles

July 21, 2025

Multi-Stage PowerShell Attack Spreads NetSupport RAT

December 31, 2024

Google's Willow Quantum Chip and its Potential Threat to Current Encryption Standards

October 29, 2024

Raptor Train - IoT Botnet

July 12, 2024

MOVEit Transfer Exploitation

July 12, 2024

Google to Block Entrust Certificates in Chrome

Recently, Google officially announced that it will be blocking websites on the Google Chrome browser that own Entrust certifications on November 1st, 2024. Google has stated that this mass blocking of Entrust-certified websites is due to Entrust’s lack of congruency and repeated failures to handle security matters efficiently. Google also claims there have been too many internal failures causing irreparable damage to their relationship with Entrust

June 6, 2024

New TikTok Zero-Day Vulnerability Discovered

June 6, 2024

Researchers have uncovered a major threat to the world of AI Models

Recently this year, cybersecurity researchers at Wiz Research have found a significant security flaw in AI service provider, Replicate, that could allow hackers to gain its users' sensitive private information and AI models. This breakthrough was found through a coding error in an open-source tool, named Cog that Replicate utilizes.

June 6, 2024

Malicious Python Package

April 19, 2024

Black Cat Attack on UnitedHealth Group

March 15, 2024

Chinese Hackers Exploit FortiOS Vulnerability

February 14, 2024

The Dangers of GenAI

Since late 2022, artificial intelligence (AI) has been making headlines almost every week. The first big story on AI was when OpenAI launched their product ChatGPT. Since then, many other companies have followed suit and come up with their own AI chatbots that seem to gain more and more functionality as time goes on. Tech giants like Google and Microsoft have also joined the race to create the best AI with Google launching Gemini (Bard) in early 2023 and Microsoft launching Copilot in late 2023. As AI continues to evolve, the risk it poses to organizations around the world will also increase.

October 24, 2023

Las Vegas Casinos Targeted by Ransomware Attacks

Ever since the invention of internet browsers for personal computers came about in the 1990s, cybercrime has been on the rise. Almost 30 years after the invention of the World Wide Web, cybercriminals have a variety of different methodologies and toolkits they use daily to leverage vulnerabilities and commit crimes. One of the most popular types of attacks that is used by threat actors is a ransomware attack. Most recently, several Las Vegas Casinos fell victim to a series of ransomware attacks.

October 12, 2023

Job Hunt or Data Hunt? The Rise of Malicious Recruiters in Cyberspace

Hackers, whether they are working by themselves or part of a larger APT (advanced persistence threat) group, are constantly thinking about new ways to launch attacks against individuals and organizations around the world. Most of these hackers and APT groups share common motives ranging from things like revenge and hacktivism to financial gain. Things get a little more complicated when hackers are working on behalf of a state-sponsored operation, especially when that state is North Korea. Recently, there have been reports of hackers connected to the North Korean state posing as job recruiters to deploy complex malware onto the devices of individuals around the world.

September 7, 2023

DarkGate Malware Returns

In the past couple of months, researchers observed an uptick in malware being delivered to end users through a malspam campaign. Malspam is a term given to spam emails that contain malicious links, contents, or files. One such malware that is currently being spread through malspam is DarkGate. Recently, researchers have begun to investigate new cases of this malware which began spreading in June 2023.

September 7, 2023

MMRat: A New Banking Trojan

Many threat actors tend to gravitate towards using some type of remote access trojan (RAT) in their campaigns. RATs are a type of malware that is designed to allow the attacker to have control over an infected device. RATs are a popular choice for hackers to use due to their many capabilities from reconnaissance and data exfiltration to long-term persistence. Throughout the last couple of months, a new Android banking trojan has been making headlines. This trojan, known as MMRat, has been seen targeting mobile users in Asia and has been linked to bank fraud.

August 7, 2023

Unraveling The Decoy Dog Malware

August 7, 2023

Biden’s IoT Cybersecurity Initiative

August 7, 2023

FraudGPT and WormGPT: New Tools in a Cyber Criminal’s Arsenal

July 5, 2023

Anonymous Sudan

Anonymous Sudan, a hacker group that originated as a Russian-speaking Telegram channel in early January of 2023 has been known to target American technology corporations by launching distributed denial of service attacks.

July 5, 2023

Code Mirage

Code Mirage: How Cyber Criminals Harness AI-Hallucinated Code for Malicious Machinations

June 5, 2023

Blacktail

Unveiling the Tactics of a Notorious Cybercrime Group

June 5, 2023

Volt Typhoon

Unraveling the Chinese Hacking Group "Volt Typhoon": A Global Cybersecurity Threat

April 10, 2023

OneNote

With the disablement of VBA macros, threat actors have turned to using OneNote attachments as a new way to install malware on an endpoint. OneNote attachments can contain embedded file formats, such as HTML, ISO, and JScripts, which can be exploited by malicious actors. OneNote attachments are particularly appealing to attackers because they are interactive and designed to be added on to and interacted with, rather than just viewed. This makes it easier for malicious actors to include enticing messages and clickable buttons that can lead to infection

March 8, 2023

Dridex

Dridex is a banking Trojan that is primarily used to steal sensitive information, such as login credentials and financial information. Dridex is known for its ability to evade detection by using dynamic configuration files.

January 5, 2023

Gu-Loader

GuLoader is an advanced malware downloader that is used by cybercriminals to distribute secondary malware payloads to further their infection chain

December 7, 2022

Raccoon Infostealer

Raccoon Stealer was first observed in 2019 and caught everyone’s attention when it became a popular choice for cybercriminals. With its new version released lately, it continues to gain popularity as a preferred tool for threat actors and poses a great threat to organizations that are not properly equipped to defend against information stealing malware such as Raccoon infostealer.

November 7, 2022

Vice Society

Vice Society is a ransomware group that initially appeared in June 2021. Although the group has been active since then, Vice Society was able to maintain its low profile until now by targeting small-sized schools. What makes Vice Society unique is that it targets organizations that have weaker security controls due to a lack of resources and exploit them for a ransom.

November 4, 2022

Typo-squatting

October 5, 2022

Metador

A fairly new hacker group known as “Metador” has recently started gaining traction in the news. This group is interesting because their motives are not fueled by any monetary value, however, it seems that the group’s main goal is long-term persistence and espionage. It is hypothesized that this group has been around for about 2-3 years targeting mostly organizations in the Middle East and Africa.

October 5, 2022

NullMixer

Nullmixer is a new malware dropper that gives us another reason to avoid questionable downloads. Your computer can become infected with malware after downloading and running the dropper, which is disguised as illegal, cracked software or some other app that might prompt you to ignore warnings from your antivirus software.

August 2, 2022

Denial of Service Attacks

A denial-of-service attack (DoS attack) is a cyber-attack in which an attacker seeks to make a machine or network resource unavailable by disrupting access to that specific machine or network. Denial of service is typically accomplished by flooding the targeted machine or resource with excess requests to prevent legitimate requests from being fulfilled.

August 2, 2022

Malware Evasion Techniques

July 4, 2022

CanaryTokens

July 4, 2022

What is Beaconing?

June 2, 2022

TrickBot

June 2, 2022

Top Ten Web Application Vulnerabilities Pt. 2

Web Applications are an attackers first choice when trying to compromise an organization. By being one of the few attack vectors that face the public, if not secured correctly, they can be an easy way for attackers to gain a foothold in your organization. In this post we will talk about the vulnerabilities in Web Applications that the OWASP Foundation has highlighted as “Most Critical”.

May 3, 2022

Fancy Bear

May 3, 2022

A Switch From the Norm - A New Malware Infection Chain

Microsoft started to disable Excel 4.0 macros by default at the beginning of the year, sending ripples through the hacking community. For context, macros are code embedded within documents which allow users to automate repetitive tasks and calculate complex equations automatically. While the purpose of macros began in a place of doing good and being efficient, they have been used for malicious purposes in the past, as malware authors have started injecting excel with malicious code that runs upon opening the sheet.