Blog

Our latest articles about Cyber Security

View all
Cybersecurity Awareness
OT & ICS
Cyberthreats
Research
News
Tracking APT35 (Charming Kitten) Activities in Albania
Cyberthreats

Tracking APT35 (Charming Kitten) Activities in Albania

APT35, also known as Charming Kitten or Phosphorus, is an Iranian government-sponsored group recognized for cyber-warfare operations. Although their tactics may appear unsophisticated, APT35 is known for persistence, especially in targeting government entities and critical infrastructure in regions such as the Middle East and Europe. Albania has previously been a target of similar attacks, indicating strategic intentions that go beyond simple data theft.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Silent Infiltration: Analyzing Infostealer Activity in Albania for September 2024
Cyberthreats

Silent Infiltration: Analyzing Infostealer Activity in Albania for September 2024

Cybercriminals are increasingly using infostealers to target individuals, businesses, and even government agencies. These malicious programs can silently extract sensitive data, such as credentials, financial information, and personal details, from compromised computers. What’s even more alarming is how infostealers are distributed through seemingly harmless methods: online ads, search engine results, and cracked software downloads.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Large-Scale Brute Force Attacks on Cisco ASA SSL WebVPN
Cyberthreats

Persistent Siege: Large-Scale Brute Force Attacks on Cisco ASA SSL WebVPN

Since December 2023, we've been tracking significant brute force campaigns targeting Cisco ASA SSL WebVPN. Daily attacks range from 1,000 to 8,000 attempts, originating from residential proxies, VPNs, and suspicious hosting providers. Attackers use automated scripts and common credentials to breach systems. As of June 4, 2024, these attacks continue.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
New Mirai Variants Targeting Latest Vulnerabilities in IoT Devices
Cyberthreats

New Mirai Variants Targeting Latest Vulnerabilities in IoT Devices

This campaign was initially observed starting on 10/04/2024, soon after the exploit for CVE-2024-3273 became available. Subsequently, on 15/04/2024, the exploitation of CVE-2024-3721 began from the same attacker. We are confident that it is the same actor behind both exploits, as the IP addresses and malware samples were identical for both vulnerabilities.

Brenton
Brenton
8
 min read
•
Dec 19, 2023
Sphere Insights on Palo Alto Network CVE-2024-3400 Exploitation
Cyberthreats

Sphere Insights on Palo Alto Network CVE-2024-3400 Exploitation

In this comprehensive overview of cyber threats and defense strategies, we explored the CVE-2024-3400 vulnerability, a command injection flaw posing significant risks to network security. We discussed how Sphere, our advanced threat intelligence tool, offers organizations a proactive defense against evolving threats, leveraging decoys and behavioral analysis for real-time threat detection.

Brenton
Brenton
5
 min read
•
Dec 19, 2023
Smishing, a variant of phishing, exploits text messaging to deceive recipients into divulging personal or financial details.
Cybersecurity Awareness

Smishing Triad: Exploiting Trust in Postal Services for Fraud Worldwide

Smishing, a variant of phishing, exploits text messaging to deceive recipients into divulging personal or financial details.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
An abstract representation of cryptographic concepts, featuring intertwined chains and mathematical symbols, symbolizing the intricate nature of cryptography. The image evokes a sense of progress and advancement, reflecting the dynamic evolution of cryptographic techniques towards enhancing privacy and security.
Research

Towards New Frontiers: Cryptography and Privacy

The evolution of cryptography continues to captivate both experts and enthusiasts alike, especially in light of recent developments surrounding SHA-256 and its resilience against collision attacks. While SHA-256 remains robust for now, the history of cryptography underscores the need for continuous advancement to stay ahead of potential threats. In this dynamic landscape, zero-knowledge proofs (ZK-proofs) emerge as a formidable tool for safeguarding privacy in cryptographic protocols. These techniques allow individuals to assert possession of sensitive information without revealing the information itself, offering enhanced privacy and scalability benefits.

Brenton
Brenton
6
 min read
•
Dec 19, 2023
Delve into our in-depth investigation of FortiOS vulnerability CVE-2024-21762, where we employed reverse analysis techniques to uncover critical flaws
Research

Vulnerability Spotlight: Reverse Analysis of FortiOS Vulnerability CVE-2024-21762 Explained

Delve into our in-depth investigation of FortiOS vulnerability CVE-2024-21762, where we employed reverse analysis techniques to uncover critical flaws

Brenton
Brenton
8
 min read
•
Dec 19, 2023
Sphere's Threat Intelligence Detects CVE-2023-20198 Exploit: Urging Immediate Cybersecurity Action
Cyberthreats

Sphere's Proactive Detection Shields Against CVE-2023-20198 Exploitation

Sphere's proprietary threat intelligence tool has detected active exploitation of CVE-2023-20198, highlighting its critical role in cybersecurity vigilance. This detection, alongside advisories from Cisco Talos, underscores the urgent need for users to apply recommended patches and enhance network monitoring to protect against sophisticated cyber threats.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin
Cyberthreats

CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin

CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Mirai Botnet Targets Netgear Vulnerability: Sphere Technology Reveals Threats
Cyberthreats

Mirai Botnet Targets Netgear Vulnerability: Sphere Technology Reveals Threats

Our advanced detection system, Sphere, has recently uncovered a new threat in the cybersecurity landscape. The infamous Mirai Botnet is now exploiting a vulnerability in Netgear DGN1000 routers, specifically targeting the 'Setup.cgi' Remote Code Execution.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Norwegian Government Targeted by Zero-Day Exploit
News

Norwegian Government Targeted by Zero-Day Exploit

The Norwegian National Security Authority (NSM) confirmed that a zero-day vulnerability, identified as CVE-2023-35078, was exploited to target the Norwegian government.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Shell Hit by Clop Ransomware Attack
News

Shell Hit by Clop Ransomware Attack

The cybercriminal gang successfully infiltrated Shell’s file transfer tool, MOVEit, and included the renowned British multinational on their extortion site.

Rei
Rei
2
 min read
•
Dec 19, 2023
Latitude Financial Breach Exposes 14M Client
News

Latitude Financial Breach Exposes 14M Client

Latitude Financial, an Australian consumer lender that offers personal loans and credit to customers at major retailers such as JB Hi-Fi, The Good Guys, and Harvey Norman, announced on March 22, 2021, that it had suffered a significant data breach.

Rei
Rei
2
 min read
•
Dec 19, 2023
Ransomware Attack Hits Barcelona Hospital Clinic
News

Ransomware Attack Hits Barcelona Hospital Clinic

Barcelona Hospital Clinic was hit by a ransomware attack on Sunday morning, which disrupted healthcare services after the hackers targeted the institution’s virtual machines.

Rei
Rei
2
 min read
•
Dec 19, 2023
Institute of Space Technology hit with ransomware attack
News

Institute of Space Technology hit with ransomware attack

The hacker group Medusa has targeted the Institute of Space Technology (IST), a public university in Islamabad, with a ransomware attack.

Rei
Rei
2
 min read
•
Dec 19, 2023
Shodan, usage and how to be protected
Research

Shodan, usage and how to be protected

Traditional search engines like Google index websites and return web sites and web content. Shodan index IoT devices and returns publicly accessible information about them rather than website content.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
What is sandboxing in cybersecurity?
Research

What is sandboxing in cybersecurity?

A sandbox is a malware detection system that runs a suspected item in a virtual machine (VM) with a full-featured operating system and analyzes the object’s behavior to detect harmful activity.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
GDPR, Google Analytics and Matamo
Research

GDPR, Google Analytics and Matamo

GDPR is the world’s strongest set of data protection rules, improving how people access information about themselves and limiting what organizations can do with personal data.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
HTTP vs HTTPS and Man in The Middle Attack
Cyberthreats

HTTP vs HTTPS and Man in The Middle Attack

The Hypertext Transfer Protocol (HTTP) is the foundation of the World Wide Web, and is used to load web pages using hypertext links. HTTP is an application layer protocol designed to transfer information between networked devices.

Rei
Rei
3
 min read
•
Dec 19, 2023
Maximize SIEM System Benefits: Parsing, Normalizing and Enrichment Tools
Cybersecurity Awareness

Maximize SIEM System Benefits: Parsing, Normalizing and Enrichment Tools

Using a parser, normalizer, and enrichment tool can be a valuable way to improve the efficiency and effectiveness of a Security Information and Event Management (SIEM) system.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Azov Ransomware: A New Threat in the Cybersecurity Landscape
Cyberthreats

Azov Ransomware: A New Threat in the Cybersecurity Landscape

Ransomware attacks continue to be a major concern for individuals and organizations alike. The latest addition to the growing list of ransomware threats is the Azov ransomware. Despite being new in the market, Azov has already shown its potential to cause significant damage.

Brenton
Brenton
1
 min read
•
Dec 19, 2023
The Value of Ongoing Security Monitoring and Maintenance from an MSSP
Cybersecurity Awareness

The Value of Ongoing Security Monitoring and Maintenance from an MSSP

Here is an example of how a Managed Security Service Provider (MSSP) might apply its services to a business.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Mapping the Battlefield: Investigating Global Attack Trends on a CVE-2018-0101 Honeypot
Cyberthreats

Mapping the Battlefield: Investigating Global Attack Trends on a CVE-2018-0101 Honeypot

In cybersecurity, staying vigilant against potential threats is of utmost importance. One effective strategy in this battle is the deployment of honeypots, decoy systems designed to attract and monitor malicious activities.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Outlaw APT Group
Cyberthreats

Outlaw APT Group: Evolution of Tactics from Cryptomining to Phishing and Spear Phishing

The Outlaw Advanced Persistent Threat (APT) group, once known for cryptomining and brute force attacks, has undergone a significant shift in their tactics.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Mastering Cybersecurity: A Comprehensive Guide
Cybersecurity Awareness

Mastering Cybersecurity: A Comprehensive Guide

Cybersecurity is a vast and ever-evolving field that covers a wide range of topics. From encryption and authentication to network security and incident response, the alphabet can serve as a useful metaphor for understanding the breadth of the field.

Mateo
Mateo
5
 min read
•
Dec 21, 2023
What is exactly a cybersecurity solution?
Cybersecurity Awareness

What is exactly a cybersecurity solution?

Another significant cybersecurity incident making headlines this year in Albania: A cyberattack launched by a hacker group based in Iran exploited the massive Albanian electronic services, central intelligence and the police department.

Xheni
Xheni
4
 min read
•
Dec 19, 2023
Cyber Security, a 2023 Guide for CEOs
Cybersecurity Awareness

Cyber Security, a 2023 Guide for CEOs

Cybersecurity is one of the biggest threats facing every company today. Cybercrime is a billion-dollar industry with no signs of slowing down. Because CEOs sit at the top of the corporate hierarchy, they must be aware of these dangers and make sure their organizations have the proper protections in place to prevent being attacked by hackers.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Cybersecurity: The Immune System of Your Digital Life
Cybersecurity Awareness

Cybersecurity: The Immune System of Your Digital Life

In today’s digital age, our online data is just as important as our physical health. Our personal information, financial data, and private conversations are all stored in the vast world of the internet. And just like our physical bodies, our online data is vulnerable to attacks. That’s where cybersecurity comes in – it’s the immune system of our digital world.

Xheni
Xheni
2
 min read
•
Dec 19, 2023
Supply Chain Attacks And Their Importance
Cybersecurity Awareness

Supply Chain Attacks And Their Importance

Supply chain attacks are a type of cyber attack where an attacker targets a company’s supply chain in order to gain unauthorized access to their systems or data. This involves compromising a third-party vendor or supplier that has access to the target company’s systems or data.

Rei
Rei
4
 min read
•
Dec 19, 2023
Real Estate Industry and Cybersecurity
Cybersecurity Awareness

Real Estate Industry and Cybersecurity

In recent years, the frequency and severity of hacker attacks have risen significantly. Ransomware attacks have been especially disruptive, as cybercriminals seize critical data and demand exorbitant payments for its release. This not only extorts money but also causes significant disruptions to business operations, and in some cases, even endangers lives.

Rei
Rei
5
 min read
•
Dec 19, 2023
Cyberbullying: How It Harms Children
Cybersecurity Awareness

Cyberbullying: How It Harms Children

The prevalence of cyberbullying has become a significant concern, particularly among children. With the increasing use of technology and online platforms, children are more vulnerable to the detrimental effects of cyberbullying.

Xheni
Xheni
2
 min read
•
Dec 19, 2023
Retail Businesses: Top 5 Cyber Attacks
Cybersecurity Awareness

Retail Businesses: Top 5 Cyber Attacks

Retail businesses face unique cybersecurity risks compared to other high-vulnerability sectors. Major retailers are highly public-facing and can easily become front-page news in case of a cyberattack

Rei
Rei
7
 min read
•
Dec 19, 2023
Andromeda Botnet: A Threat to Albania’s Cybersecurity
Research

Andromeda Botnet: A Threat to Albania’s Cybersecurity

The Andromeda botnet, also known as Gamarue, Wauchos, and Andromeda Stealer, is a sophisticated and long-standing malware family that has been used for various purposes, such as spamming, DDoS attacks, and credential theft. It has been active since 2011 and has infected millions of devices worldwide.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Exploring Leading Vendors’ Hardened OS in Firewalls
Research

Where Firewalls Run

Firewalls are essential security devices that protect networks from unauthorized access and malicious activities. These critical components operate on specialized operating systems (OS) designed to provide robust protection and optimize performance. In this article, we will delve into the world of firewalls and examine the hardened OS employed by some of the industry’s leading vendors. From well-established companies to innovative newcomers, let’s explore where firewalls run and the key characteristics of these operating systems.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
SSH Login Attempts Analysis
Cyberthreats

SSH Login Attempts Analysis: A Comprehensive Examination

In cybersecurity, safeguarding systems against unauthorized access is paramount. SSH (Secure Shell) stands as a widely-utilized protocol for remote server and network device access.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
The Best Password Managers for Online Security
Cybersecurity Awareness

The Best Password Managers for Online Security

In today’s interconnected digital world, where nearly every aspect of our lives involves online accounts and personal data, ensuring the security of our information has become paramount.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Raising Awareness and the Role of Independent Auditors
Cybersecurity Awareness

Raising Awareness and the Role of Independent Auditors

Tirana International Hotel, June 30, 2023, IEKA (Institute of Registered Accounting Experts) held an important seminar on cyber security. The event highlighted the challenges of increasing cyber risk and highlighted the key role of independent auditors in identifying and mitigating these risks

Xheni
Xheni
2
 min read
•
Dec 19, 2023
The Importance of Operational Technology Cybersecurity
OT & ICS

The Importance of Operational Technology Cybersecurity

Operational technology, which encompasses the hardware and software used to control and monitor physical devices and processes, plays a pivotal role in critical sectors such as energy, manufacturing, healthcare, and transportation.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Industrial control systems (ICS) form the backbone of critical infrastructure sectors, enabling the efficient management of industrial processes.
OT & ICS

Noteworthy Threats in ICS Malware Analysis

Industrial control systems (ICS) form the backbone of critical infrastructure sectors, enabling the efficient management of industrial processes. However, these systems have increasingly become prime targets for malicious actors aiming to disrupt services, compromise sensitive data, or sabotage operations.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Modbus Security
OT & ICS

Behind the Scenes of Modbus: Cybersecurity Risks and Solutions

Born in 1979, it was created by Modicon and quickly became a cornerstone for establishing communication between intelligent devices in industrial settings. Modbus is a messaging structure that facilitates master-slave and client-server communication, enabling the seamless exchange of critical data

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Smishing, a variant of phishing, exploits text messaging to deceive recipients into divulging personal or financial details.
Cybersecurity Awareness

Smishing Triad: Exploiting Trust in Postal Services for Fraud Worldwide

Smishing, a variant of phishing, exploits text messaging to deceive recipients into divulging personal or financial details.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Maximize SIEM System Benefits: Parsing, Normalizing and Enrichment Tools
Cybersecurity Awareness

Maximize SIEM System Benefits: Parsing, Normalizing and Enrichment Tools

Using a parser, normalizer, and enrichment tool can be a valuable way to improve the efficiency and effectiveness of a Security Information and Event Management (SIEM) system.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
The Value of Ongoing Security Monitoring and Maintenance from an MSSP
Cybersecurity Awareness

The Value of Ongoing Security Monitoring and Maintenance from an MSSP

Here is an example of how a Managed Security Service Provider (MSSP) might apply its services to a business.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Mastering Cybersecurity: A Comprehensive Guide
Cybersecurity Awareness

Mastering Cybersecurity: A Comprehensive Guide

Cybersecurity is a vast and ever-evolving field that covers a wide range of topics. From encryption and authentication to network security and incident response, the alphabet can serve as a useful metaphor for understanding the breadth of the field.

Mateo
Mateo
5
 min read
•
Dec 21, 2023
What is exactly a cybersecurity solution?
Cybersecurity Awareness

What is exactly a cybersecurity solution?

Another significant cybersecurity incident making headlines this year in Albania: A cyberattack launched by a hacker group based in Iran exploited the massive Albanian electronic services, central intelligence and the police department.

Xheni
Xheni
4
 min read
•
Dec 19, 2023
Cyber Security, a 2023 Guide for CEOs
Cybersecurity Awareness

Cyber Security, a 2023 Guide for CEOs

Cybersecurity is one of the biggest threats facing every company today. Cybercrime is a billion-dollar industry with no signs of slowing down. Because CEOs sit at the top of the corporate hierarchy, they must be aware of these dangers and make sure their organizations have the proper protections in place to prevent being attacked by hackers.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Cybersecurity: The Immune System of Your Digital Life
Cybersecurity Awareness

Cybersecurity: The Immune System of Your Digital Life

In today’s digital age, our online data is just as important as our physical health. Our personal information, financial data, and private conversations are all stored in the vast world of the internet. And just like our physical bodies, our online data is vulnerable to attacks. That’s where cybersecurity comes in – it’s the immune system of our digital world.

Xheni
Xheni
2
 min read
•
Dec 19, 2023
Supply Chain Attacks And Their Importance
Cybersecurity Awareness

Supply Chain Attacks And Their Importance

Supply chain attacks are a type of cyber attack where an attacker targets a company’s supply chain in order to gain unauthorized access to their systems or data. This involves compromising a third-party vendor or supplier that has access to the target company’s systems or data.

Rei
Rei
4
 min read
•
Dec 19, 2023
Real Estate Industry and Cybersecurity
Cybersecurity Awareness

Real Estate Industry and Cybersecurity

In recent years, the frequency and severity of hacker attacks have risen significantly. Ransomware attacks have been especially disruptive, as cybercriminals seize critical data and demand exorbitant payments for its release. This not only extorts money but also causes significant disruptions to business operations, and in some cases, even endangers lives.

Rei
Rei
5
 min read
•
Dec 19, 2023
Cyberbullying: How It Harms Children
Cybersecurity Awareness

Cyberbullying: How It Harms Children

The prevalence of cyberbullying has become a significant concern, particularly among children. With the increasing use of technology and online platforms, children are more vulnerable to the detrimental effects of cyberbullying.

Xheni
Xheni
2
 min read
•
Dec 19, 2023
Retail Businesses: Top 5 Cyber Attacks
Cybersecurity Awareness

Retail Businesses: Top 5 Cyber Attacks

Retail businesses face unique cybersecurity risks compared to other high-vulnerability sectors. Major retailers are highly public-facing and can easily become front-page news in case of a cyberattack

Rei
Rei
7
 min read
•
Dec 19, 2023
The Best Password Managers for Online Security
Cybersecurity Awareness

The Best Password Managers for Online Security

In today’s interconnected digital world, where nearly every aspect of our lives involves online accounts and personal data, ensuring the security of our information has become paramount.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Raising Awareness and the Role of Independent Auditors
Cybersecurity Awareness

Raising Awareness and the Role of Independent Auditors

Tirana International Hotel, June 30, 2023, IEKA (Institute of Registered Accounting Experts) held an important seminar on cyber security. The event highlighted the challenges of increasing cyber risk and highlighted the key role of independent auditors in identifying and mitigating these risks

Xheni
Xheni
2
 min read
•
Dec 19, 2023
The Importance of Operational Technology Cybersecurity
OT & ICS

The Importance of Operational Technology Cybersecurity

Operational technology, which encompasses the hardware and software used to control and monitor physical devices and processes, plays a pivotal role in critical sectors such as energy, manufacturing, healthcare, and transportation.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Industrial control systems (ICS) form the backbone of critical infrastructure sectors, enabling the efficient management of industrial processes.
OT & ICS

Noteworthy Threats in ICS Malware Analysis

Industrial control systems (ICS) form the backbone of critical infrastructure sectors, enabling the efficient management of industrial processes. However, these systems have increasingly become prime targets for malicious actors aiming to disrupt services, compromise sensitive data, or sabotage operations.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Modbus Security
OT & ICS

Behind the Scenes of Modbus: Cybersecurity Risks and Solutions

Born in 1979, it was created by Modicon and quickly became a cornerstone for establishing communication between intelligent devices in industrial settings. Modbus is a messaging structure that facilitates master-slave and client-server communication, enabling the seamless exchange of critical data

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Tracking APT35 (Charming Kitten) Activities in Albania
Cyberthreats

Tracking APT35 (Charming Kitten) Activities in Albania

APT35, also known as Charming Kitten or Phosphorus, is an Iranian government-sponsored group recognized for cyber-warfare operations. Although their tactics may appear unsophisticated, APT35 is known for persistence, especially in targeting government entities and critical infrastructure in regions such as the Middle East and Europe. Albania has previously been a target of similar attacks, indicating strategic intentions that go beyond simple data theft.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Silent Infiltration: Analyzing Infostealer Activity in Albania for September 2024
Cyberthreats

Silent Infiltration: Analyzing Infostealer Activity in Albania for September 2024

Cybercriminals are increasingly using infostealers to target individuals, businesses, and even government agencies. These malicious programs can silently extract sensitive data, such as credentials, financial information, and personal details, from compromised computers. What’s even more alarming is how infostealers are distributed through seemingly harmless methods: online ads, search engine results, and cracked software downloads.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Large-Scale Brute Force Attacks on Cisco ASA SSL WebVPN
Cyberthreats

Persistent Siege: Large-Scale Brute Force Attacks on Cisco ASA SSL WebVPN

Since December 2023, we've been tracking significant brute force campaigns targeting Cisco ASA SSL WebVPN. Daily attacks range from 1,000 to 8,000 attempts, originating from residential proxies, VPNs, and suspicious hosting providers. Attackers use automated scripts and common credentials to breach systems. As of June 4, 2024, these attacks continue.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
New Mirai Variants Targeting Latest Vulnerabilities in IoT Devices
Cyberthreats

New Mirai Variants Targeting Latest Vulnerabilities in IoT Devices

This campaign was initially observed starting on 10/04/2024, soon after the exploit for CVE-2024-3273 became available. Subsequently, on 15/04/2024, the exploitation of CVE-2024-3721 began from the same attacker. We are confident that it is the same actor behind both exploits, as the IP addresses and malware samples were identical for both vulnerabilities.

Brenton
Brenton
8
 min read
•
Dec 19, 2023
Sphere Insights on Palo Alto Network CVE-2024-3400 Exploitation
Cyberthreats

Sphere Insights on Palo Alto Network CVE-2024-3400 Exploitation

In this comprehensive overview of cyber threats and defense strategies, we explored the CVE-2024-3400 vulnerability, a command injection flaw posing significant risks to network security. We discussed how Sphere, our advanced threat intelligence tool, offers organizations a proactive defense against evolving threats, leveraging decoys and behavioral analysis for real-time threat detection.

Brenton
Brenton
5
 min read
•
Dec 19, 2023
Sphere's Threat Intelligence Detects CVE-2023-20198 Exploit: Urging Immediate Cybersecurity Action
Cyberthreats

Sphere's Proactive Detection Shields Against CVE-2023-20198 Exploitation

Sphere's proprietary threat intelligence tool has detected active exploitation of CVE-2023-20198, highlighting its critical role in cybersecurity vigilance. This detection, alongside advisories from Cisco Talos, underscores the urgent need for users to apply recommended patches and enhance network monitoring to protect against sophisticated cyber threats.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin
Cyberthreats

CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin

CVE-2023-6875 Exploitation in POST SMTP Mailer Plugin

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Mirai Botnet Targets Netgear Vulnerability: Sphere Technology Reveals Threats
Cyberthreats

Mirai Botnet Targets Netgear Vulnerability: Sphere Technology Reveals Threats

Our advanced detection system, Sphere, has recently uncovered a new threat in the cybersecurity landscape. The infamous Mirai Botnet is now exploiting a vulnerability in Netgear DGN1000 routers, specifically targeting the 'Setup.cgi' Remote Code Execution.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
HTTP vs HTTPS and Man in The Middle Attack
Cyberthreats

HTTP vs HTTPS and Man in The Middle Attack

The Hypertext Transfer Protocol (HTTP) is the foundation of the World Wide Web, and is used to load web pages using hypertext links. HTTP is an application layer protocol designed to transfer information between networked devices.

Rei
Rei
3
 min read
•
Dec 19, 2023
Azov Ransomware: A New Threat in the Cybersecurity Landscape
Cyberthreats

Azov Ransomware: A New Threat in the Cybersecurity Landscape

Ransomware attacks continue to be a major concern for individuals and organizations alike. The latest addition to the growing list of ransomware threats is the Azov ransomware. Despite being new in the market, Azov has already shown its potential to cause significant damage.

Brenton
Brenton
1
 min read
•
Dec 19, 2023
Mapping the Battlefield: Investigating Global Attack Trends on a CVE-2018-0101 Honeypot
Cyberthreats

Mapping the Battlefield: Investigating Global Attack Trends on a CVE-2018-0101 Honeypot

In cybersecurity, staying vigilant against potential threats is of utmost importance. One effective strategy in this battle is the deployment of honeypots, decoy systems designed to attract and monitor malicious activities.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
Outlaw APT Group
Cyberthreats

Outlaw APT Group: Evolution of Tactics from Cryptomining to Phishing and Spear Phishing

The Outlaw Advanced Persistent Threat (APT) group, once known for cryptomining and brute force attacks, has undergone a significant shift in their tactics.

Brenton
Brenton
4
 min read
•
Dec 19, 2023
SSH Login Attempts Analysis
Cyberthreats

SSH Login Attempts Analysis: A Comprehensive Examination

In cybersecurity, safeguarding systems against unauthorized access is paramount. SSH (Secure Shell) stands as a widely-utilized protocol for remote server and network device access.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
An abstract representation of cryptographic concepts, featuring intertwined chains and mathematical symbols, symbolizing the intricate nature of cryptography. The image evokes a sense of progress and advancement, reflecting the dynamic evolution of cryptographic techniques towards enhancing privacy and security.
Research

Towards New Frontiers: Cryptography and Privacy

The evolution of cryptography continues to captivate both experts and enthusiasts alike, especially in light of recent developments surrounding SHA-256 and its resilience against collision attacks. While SHA-256 remains robust for now, the history of cryptography underscores the need for continuous advancement to stay ahead of potential threats. In this dynamic landscape, zero-knowledge proofs (ZK-proofs) emerge as a formidable tool for safeguarding privacy in cryptographic protocols. These techniques allow individuals to assert possession of sensitive information without revealing the information itself, offering enhanced privacy and scalability benefits.

Brenton
Brenton
6
 min read
•
Dec 19, 2023
Delve into our in-depth investigation of FortiOS vulnerability CVE-2024-21762, where we employed reverse analysis techniques to uncover critical flaws
Research

Vulnerability Spotlight: Reverse Analysis of FortiOS Vulnerability CVE-2024-21762 Explained

Delve into our in-depth investigation of FortiOS vulnerability CVE-2024-21762, where we employed reverse analysis techniques to uncover critical flaws

Brenton
Brenton
8
 min read
•
Dec 19, 2023
Shodan, usage and how to be protected
Research

Shodan, usage and how to be protected

Traditional search engines like Google index websites and return web sites and web content. Shodan index IoT devices and returns publicly accessible information about them rather than website content.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
What is sandboxing in cybersecurity?
Research

What is sandboxing in cybersecurity?

A sandbox is a malware detection system that runs a suspected item in a virtual machine (VM) with a full-featured operating system and analyzes the object’s behavior to detect harmful activity.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
GDPR, Google Analytics and Matamo
Research

GDPR, Google Analytics and Matamo

GDPR is the world’s strongest set of data protection rules, improving how people access information about themselves and limiting what organizations can do with personal data.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Andromeda Botnet: A Threat to Albania’s Cybersecurity
Research

Andromeda Botnet: A Threat to Albania’s Cybersecurity

The Andromeda botnet, also known as Gamarue, Wauchos, and Andromeda Stealer, is a sophisticated and long-standing malware family that has been used for various purposes, such as spamming, DDoS attacks, and credential theft. It has been active since 2011 and has infected millions of devices worldwide.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Exploring Leading Vendors’ Hardened OS in Firewalls
Research

Where Firewalls Run

Firewalls are essential security devices that protect networks from unauthorized access and malicious activities. These critical components operate on specialized operating systems (OS) designed to provide robust protection and optimize performance. In this article, we will delve into the world of firewalls and examine the hardened OS employed by some of the industry’s leading vendors. From well-established companies to innovative newcomers, let’s explore where firewalls run and the key characteristics of these operating systems.

Brenton
Brenton
3
 min read
•
Dec 19, 2023
Norwegian Government Targeted by Zero-Day Exploit
News

Norwegian Government Targeted by Zero-Day Exploit

The Norwegian National Security Authority (NSM) confirmed that a zero-day vulnerability, identified as CVE-2023-35078, was exploited to target the Norwegian government.

Brenton
Brenton
2
 min read
•
Dec 19, 2023
Shell Hit by Clop Ransomware Attack
News

Shell Hit by Clop Ransomware Attack

The cybercriminal gang successfully infiltrated Shell’s file transfer tool, MOVEit, and included the renowned British multinational on their extortion site.

Rei
Rei
2
 min read
•
Dec 19, 2023
Latitude Financial Breach Exposes 14M Client
News

Latitude Financial Breach Exposes 14M Client

Latitude Financial, an Australian consumer lender that offers personal loans and credit to customers at major retailers such as JB Hi-Fi, The Good Guys, and Harvey Norman, announced on March 22, 2021, that it had suffered a significant data breach.

Rei
Rei
2
 min read
•
Dec 19, 2023
Ransomware Attack Hits Barcelona Hospital Clinic
News

Ransomware Attack Hits Barcelona Hospital Clinic

Barcelona Hospital Clinic was hit by a ransomware attack on Sunday morning, which disrupted healthcare services after the hackers targeted the institution’s virtual machines.

Rei
Rei
2
 min read
•
Dec 19, 2023
Institute of Space Technology hit with ransomware attack
News

Institute of Space Technology hit with ransomware attack

The hacker group Medusa has targeted the Institute of Space Technology (IST), a public university in Islamabad, with a ransomware attack.

Rei
Rei
2
 min read
•
Dec 19, 2023
By clicking "Accept" you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
DenyAccept